General
- Target 2026-06-28_e961f7b258256bc68f944f90fc859a81_elex_mafia_poet-rat_stealc_tofsee
- Size 1.8MB
- Sample260628-wvcf2abs3x
- SHA256 82966d2bada96fa353188f6b066310a6d546a2584cf6983c12db0fa013cd1485
- MD5 e961f7b258256bc68f944f90fc859a81
- SHA1 f4f286740fdccfcf05101c81d0c0f11a4b3517e0
- SHA512 fa5d790956623ab062f0ae384889655b6defa792c13fe7e28f8f0e6ae585e2c5ae1a22f816632b3933a2e6e5deab6ac86368d61923cced1c0557bec92cac01fb
- SSDEEP 24576:wUQOJDrxu2qmqBb8NGEAFC5etW0Ri+aMyFH1KN:w/OJDrxu2qvb8NGEADt7i+/yTW
- TLSH T1E395812277FD0608F2F75E752AB6F9504C7ABDA25D21D29D1078908E8D71B80DA63B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-28_e961f7b258256bc68f944f90fc859a81_elex_mafia_poet-rat_stealc_tofsee.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_e961f7b258256bc68f944f90fc859a81_elex_mafia_poet-rat_stealc_tofsee.exe
Resource
win11ltsc2024-20260617-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_e961f7b258256bc68f944f90fc859a81_elex_mafia_poet-rat_stealc_tofsee
- Size 1.8MB
- SHA256 82966d2bada96fa353188f6b066310a6d546a2584cf6983c12db0fa013cd1485
- MD5 e961f7b258256bc68f944f90fc859a81
- SHA1 f4f286740fdccfcf05101c81d0c0f11a4b3517e0
- SHA512 fa5d790956623ab062f0ae384889655b6defa792c13fe7e28f8f0e6ae585e2c5ae1a22f816632b3933a2e6e5deab6ac86368d61923cced1c0557bec92cac01fb
- SSDEEP 24576:wUQOJDrxu2qmqBb8NGEAFC5etW0Ri+aMyFH1KN:w/OJDrxu2qvb8NGEADt7i+/yTW
- TLSH T1E395812277FD0608F2F75E752AB6F9504C7ABDA25D21D29D1078908E8D71B80DA63B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.