General
- Target 2026-06-28_2508eac23c17c4a69ec4f7e2acb3684c_elex_mafia_stealc_tofsee
- Size 435KB
- Sample260628-3vbcashw3p
- SHA256 dafb0276f192cdbc4efe914910ed44e9c3d4377b4278df9dddb9704f6ffcefc7
- MD5 2508eac23c17c4a69ec4f7e2acb3684c
- SHA1 ba3f40894a8e82190848d66d92e46899f125b4dc
- SHA512 d6651a1369452e5564ba44d139a9c34bb1b5fbddd587767a42ebdd04ef0e75a5768e64582a5f1a1ac90c28a5b0ac3949cad1dc53ec747c7221d8cd84cf8ef324
- SSDEEP 6144:arxfv4co9ZL3GBGgjODxbfVhxMz2gzJkccEEAVbHhyAEIZuk8teZsumB:sm48gODxbN4z2y3TV3EIZr8UZsXB
- TLSH T11994D02472818133D19302311BAAE7A26A3E3CB5573568C37BE8766D1BB17D1E73538B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-28_2508eac23c17c4a69ec4f7e2acb3684c_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_2508eac23c17c4a69ec4f7e2acb3684c_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260617-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_2508eac23c17c4a69ec4f7e2acb3684c_elex_mafia_stealc_tofsee
- Size 435KB
- SHA256 dafb0276f192cdbc4efe914910ed44e9c3d4377b4278df9dddb9704f6ffcefc7
- MD5 2508eac23c17c4a69ec4f7e2acb3684c
- SHA1 ba3f40894a8e82190848d66d92e46899f125b4dc
- SHA512 d6651a1369452e5564ba44d139a9c34bb1b5fbddd587767a42ebdd04ef0e75a5768e64582a5f1a1ac90c28a5b0ac3949cad1dc53ec747c7221d8cd84cf8ef324
- SSDEEP 6144:arxfv4co9ZL3GBGgjODxbfVhxMz2gzJkccEEAVbHhyAEIZuk8teZsumB:sm48gODxbN4z2y3TV3EIZr8UZsXB
- TLSH T11994D02472818133D19302311BAAE7A26A3E3CB5573568C37BE8766D1BB17D1E73538B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Deletes itself
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.