General
- Target 2026-06-28_eb04ebcc61f449cbdb92a64af5dd8ed6_elex_mafia_stealc_tofsee
- Size 479KB
- Sample260628-ws7t6aaz8s
- SHA256 2621ae0508f288d234df807c3d404868107ad6c426294198be27790c5b4951b6
- MD5 eb04ebcc61f449cbdb92a64af5dd8ed6
- SHA1 1da0f7846cc900f1dda8220047fe4c44d48e425a
- SHA512 66a00fc6d834c27c8441ce445d61a7d2a926ee2413f6b0ddcd89913e310e50600f3c9de6a3b3fd52cdfc1c098ab289ea5301920f05e7918e69bf53aad41fda19
- SSDEEP 12288:bO4rfItL8HAZfC0qTp5tOtWSAH2qO/QcZ75UO:bO4rQtGAdCHTp5AMsqO/QcZVUO
- TLSH T128A4F12676818133D29302700BE6D7AAAA3E75B51726A4C737E8427D1F716E1D33B34B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-28_eb04ebcc61f449cbdb92a64af5dd8ed6_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_eb04ebcc61f449cbdb92a64af5dd8ed6_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260618-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_eb04ebcc61f449cbdb92a64af5dd8ed6_elex_mafia_stealc_tofsee
- Size 479KB
- SHA256 2621ae0508f288d234df807c3d404868107ad6c426294198be27790c5b4951b6
- MD5 eb04ebcc61f449cbdb92a64af5dd8ed6
- SHA1 1da0f7846cc900f1dda8220047fe4c44d48e425a
- SHA512 66a00fc6d834c27c8441ce445d61a7d2a926ee2413f6b0ddcd89913e310e50600f3c9de6a3b3fd52cdfc1c098ab289ea5301920f05e7918e69bf53aad41fda19
- SSDEEP 12288:bO4rfItL8HAZfC0qTp5tOtWSAH2qO/QcZ75UO:bO4rQtGAdCHTp5AMsqO/QcZVUO
- TLSH T128A4F12676818133D29302700BE6D7AAAA3E75B51726A4C737E8427D1F716E1D33B34B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Deletes itself
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.