General
- Target 2026-06-28_7726d545d1ef0627e69c547a28739f57_elex_mafia_stealc_tofsee
- Size 652KB
- Sample260628-1er9rsft4q
- SHA256 7bd22109604924665b4a94c403e9dfb79a1d627382902f48f86f8bc55513daf0
- MD5 7726d545d1ef0627e69c547a28739f57
- SHA1 6fd71ff45ce8ac661eacbb2d29096dfebd6c1cf0
- SHA512 da009b54ec743436e59044533a223e5e55a60cf0a357dbeaa462b7ff6f0c44753d32300169bdb36736e5bed3199aaf69ce2b2e78b2794fc2909b372ab9a9522b
- SSDEEP 12288:wU5rCOTeiDgCnaPjolWbHw31v74c37W/NZ+3/v+I9hUG2VA:wUQOJDAjolzl0iONGEA
- TLSH T158E4D02177D8C532E5FB037859B5E6644E7EBD226722D6CF2F8015AE09B1BC08A71723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-28_7726d545d1ef0627e69c547a28739f57_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_7726d545d1ef0627e69c547a28739f57_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260617-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_7726d545d1ef0627e69c547a28739f57_elex_mafia_stealc_tofsee
- Size 652KB
- SHA256 7bd22109604924665b4a94c403e9dfb79a1d627382902f48f86f8bc55513daf0
- MD5 7726d545d1ef0627e69c547a28739f57
- SHA1 6fd71ff45ce8ac661eacbb2d29096dfebd6c1cf0
- SHA512 da009b54ec743436e59044533a223e5e55a60cf0a357dbeaa462b7ff6f0c44753d32300169bdb36736e5bed3199aaf69ce2b2e78b2794fc2909b372ab9a9522b
- SSDEEP 12288:wU5rCOTeiDgCnaPjolWbHw31v74c37W/NZ+3/v+I9hUG2VA:wUQOJDAjolzl0iONGEA
- TLSH T158E4D02177D8C532E5FB037859B5E6644E7EBD226722D6CF2F8015AE09B1BC08A71723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.