General
- Target 2026-06-28_b3d2a15782ab19801305e12031e28767_elex_mafia_stealc_tofsee
- Size 436KB
- Sample260628-yest7adv6l
- SHA256 43b161121b8e8eaaadc47269a08a7e25b108348c95d0da2c52b428367979dbd0
- MD5 b3d2a15782ab19801305e12031e28767
- SHA1 f4d671343c01da0da4d66d37692f2b74bb4057dd
- SHA512 4e21f86ea51d79fc0a59b2db18de5bb47d7116d119d1d1168a8fdb526e9303911f3cd92f57466b10ad138f16e51401954cfc54e0b684d36124f47d6db8923238
- SSDEEP 12288:aO4GfBtL8HP7uoWby4+yVye5dp4mEjNq2rhMpmAmz:aO4GZtGPCR+yVxdp7EjNqcAg
- TLSH T1BB94E0213182C032E29621724FE99776597A39B1072164CB3FD6C66D9FA07F2E37934B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-28_b3d2a15782ab19801305e12031e28767_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_b3d2a15782ab19801305e12031e28767_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260617-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_b3d2a15782ab19801305e12031e28767_elex_mafia_stealc_tofsee
- Size 436KB
- SHA256 43b161121b8e8eaaadc47269a08a7e25b108348c95d0da2c52b428367979dbd0
- MD5 b3d2a15782ab19801305e12031e28767
- SHA1 f4d671343c01da0da4d66d37692f2b74bb4057dd
- SHA512 4e21f86ea51d79fc0a59b2db18de5bb47d7116d119d1d1168a8fdb526e9303911f3cd92f57466b10ad138f16e51401954cfc54e0b684d36124f47d6db8923238
- SSDEEP 12288:aO4GfBtL8HP7uoWby4+yVye5dp4mEjNq2rhMpmAmz:aO4GZtGPCR+yVxdp7EjNqcAg
- TLSH T1BB94E0213182C032E29621724FE99776597A39B1072164CB3FD6C66D9FA07F2E37934B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Deletes itself
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.