General
- Target 2026-06-28_2dd070f3f6b4c6d5f63f7717d6f39583_elex_mafia_stealc_tofsee
- Size 384KB
- Sample260628-3ldfasht7k
- SHA256 ab74e9c00ab128cfaeb08f1ca5902ad0d3e48cf0a8630f3965c1e0df44f032c5
- MD5 2dd070f3f6b4c6d5f63f7717d6f39583
- SHA1 13ae464204789a6e08cdd213ff8d6b08c59bfc2e
- SHA512 267953a24d533d4b46bfade371b9b960bd1695744f4c14fd44a7115256b704b3715a7b3253228d19da13d19ed04d1f539f318c3c60a777d31e3ab6e32b059361
- SSDEEP 6144:drxfv4co9ZL3GBGgjODxbf7hHax45XEyt29iHzcrFlHlP6HBQ0Z:Zm48gODxbzgOrt29iHzUFJdQa0Z
- TLSH T1F084C034B181C036D19602314BFAEB32593A3DB24B7568D77BE43A699EB03D1A73435B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-28_2dd070f3f6b4c6d5f63f7717d6f39583_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_2dd070f3f6b4c6d5f63f7717d6f39583_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260618-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_2dd070f3f6b4c6d5f63f7717d6f39583_elex_mafia_stealc_tofsee
- Size 384KB
- SHA256 ab74e9c00ab128cfaeb08f1ca5902ad0d3e48cf0a8630f3965c1e0df44f032c5
- MD5 2dd070f3f6b4c6d5f63f7717d6f39583
- SHA1 13ae464204789a6e08cdd213ff8d6b08c59bfc2e
- SHA512 267953a24d533d4b46bfade371b9b960bd1695744f4c14fd44a7115256b704b3715a7b3253228d19da13d19ed04d1f539f318c3c60a777d31e3ab6e32b059361
- SSDEEP 6144:drxfv4co9ZL3GBGgjODxbf7hHax45XEyt29iHzcrFlHlP6HBQ0Z:Zm48gODxbzgOrt29iHzUFJdQa0Z
- TLSH T1F084C034B181C036D19602314BFAEB32593A3DB24B7568D77BE43A699EB03D1A73435B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Deletes itself
Executes dropped EXE
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.