General
- Target 2026-06-28_7b878337859777cc351ab13bac162a3f_elex_mafia_stealc_tofsee
- Size 428KB
- Sample260628-1am49aew3t
- SHA256 993867d1aeb497a7e3bc5e921a0192004a600a1549a052c0957f762711c8ae7a
- MD5 7b878337859777cc351ab13bac162a3f
- SHA1 8d5ae41e77bf8daadbc773bf8d07a8198e081568
- SHA512 24114de22e7aba7d80a3632b9ded8702df9facaac3e6c05949cc13298f0da175c225baecd1b1a57ffabe194f1623b7431ca7cb67e5ad166e228f417f7e7d9a1b
- SSDEEP 12288:Z594+AcL4tBekiuKzEr0IUyiC6Lua2jtV9NrDQCxbqcqrl:BL4tBekiuVr4FqaitV9N3c
- TLSH T1F694E0313541C033E1A725384FF5CB6AAA7E79A54B22A8CB7BD4073D2EA46D2D634347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-28_7b878337859777cc351ab13bac162a3f_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_7b878337859777cc351ab13bac162a3f_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260617-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_7b878337859777cc351ab13bac162a3f_elex_mafia_stealc_tofsee
- Size 428KB
- SHA256 993867d1aeb497a7e3bc5e921a0192004a600a1549a052c0957f762711c8ae7a
- MD5 7b878337859777cc351ab13bac162a3f
- SHA1 8d5ae41e77bf8daadbc773bf8d07a8198e081568
- SHA512 24114de22e7aba7d80a3632b9ded8702df9facaac3e6c05949cc13298f0da175c225baecd1b1a57ffabe194f1623b7431ca7cb67e5ad166e228f417f7e7d9a1b
- SSDEEP 12288:Z594+AcL4tBekiuKzEr0IUyiC6Lua2jtV9NrDQCxbqcqrl:BL4tBekiuVr4FqaitV9N3c
- TLSH T1F694E0313541C033E1A725384FF5CB6AAA7E79A54B22A8CB7BD4073D2EA46D2D634347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Deletes itself
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.