General
- Target 2026-06-28_672b70b56595bc94175d313ea72f7cbc_elex_mafia_stealc_tofsee
- Size 529KB
- Sample260628-1ylakae13t
- SHA256 9e3fa6d1800587d79d27262c5b70ebb4ad9d88b0a51575801ec25891ebd4bfc1
- MD5 672b70b56595bc94175d313ea72f7cbc
- SHA1 e3d77d2e131010bea09cb98fa56be64b05d42770
- SHA512 9a05c6c1c41d04b6be20b74136394e8832398edf64d89705e846bd8756eafc6105cdba155bbae0297191b208e698c27cc9b4bebac3859c797955d47569a85d18
- SSDEEP 12288:NU5rCOTeijMlY/Tr9S4BMBzXSPKg/kaSTZwlH4Hp:NUQOJjcY7YXpSPR/lSTSlH4Hp
- TLSH T148B4F12AB644C233E6D202711A96DBB26A3F7C750736A4C32B94627E2B717D1D375307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-28_672b70b56595bc94175d313ea72f7cbc_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_672b70b56595bc94175d313ea72f7cbc_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260617-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_672b70b56595bc94175d313ea72f7cbc_elex_mafia_stealc_tofsee
- Size 529KB
- SHA256 9e3fa6d1800587d79d27262c5b70ebb4ad9d88b0a51575801ec25891ebd4bfc1
- MD5 672b70b56595bc94175d313ea72f7cbc
- SHA1 e3d77d2e131010bea09cb98fa56be64b05d42770
- SHA512 9a05c6c1c41d04b6be20b74136394e8832398edf64d89705e846bd8756eafc6105cdba155bbae0297191b208e698c27cc9b4bebac3859c797955d47569a85d18
- SSDEEP 12288:NU5rCOTeijMlY/Tr9S4BMBzXSPKg/kaSTZwlH4Hp:NUQOJjcY7YXpSPR/lSTSlH4Hp
- TLSH T148B4F12AB644C233E6D202711A96DBB26A3F7C750736A4C32B94627E2B717D1D375307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.