General
- Target 2026-06-28_d3528dcced9688b496586ff9bcbf5839_elex_mafia_stealc_tofsee
- Size 468KB
- Sample260628-xhrwmacv9q
- SHA256 78aafd09fbe81099add36894a04fa5d5533103fe314c2201b7d930a036ec9b21
- MD5 d3528dcced9688b496586ff9bcbf5839
- SHA1 fe6388f801d3392d9b2a057cc3b6335598ced595
- SHA512 9ede91a3b9a5716d647e467a0570988506f34393a79d2cce053292dfca562e0a2a02b2506d3f750fd57953fc15f97f79300c8f97479da31516e7c65463711e5a
- SSDEEP 12288:qO4rfItL8HG5ffDJX4U0YQjV8bv2l7bWmeEVGL:qO4rQtGGBD6NjrumeEVGL
- TLSH T13EA4F1267681C133C69302750BEADB6AA63F79B41322A4C33BD8477D1E626E1D336347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-28_d3528dcced9688b496586ff9bcbf5839_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_d3528dcced9688b496586ff9bcbf5839_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260618-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_d3528dcced9688b496586ff9bcbf5839_elex_mafia_stealc_tofsee
- Size 468KB
- SHA256 78aafd09fbe81099add36894a04fa5d5533103fe314c2201b7d930a036ec9b21
- MD5 d3528dcced9688b496586ff9bcbf5839
- SHA1 fe6388f801d3392d9b2a057cc3b6335598ced595
- SHA512 9ede91a3b9a5716d647e467a0570988506f34393a79d2cce053292dfca562e0a2a02b2506d3f750fd57953fc15f97f79300c8f97479da31516e7c65463711e5a
- SSDEEP 12288:qO4rfItL8HG5ffDJX4U0YQjV8bv2l7bWmeEVGL:qO4rQtGGBD6NjrumeEVGL
- TLSH T13EA4F1267681C133C69302750BEADB6AA63F79B41322A4C33BD8477D1E626E1D336347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Deletes itself
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.