General
- Target 2026-06-28_1932b501d940f220110d933ceb223db3_elex_mafia_stealc_tofsee
- Size 505KB
- Sample260629-agf2eahy8p
- SHA256 43232a29c4ef7c6c61a082037ceb6575ce551d806d2345c0a83b9c3b881527c8
- MD5 1932b501d940f220110d933ceb223db3
- SHA1 a871ae1ffd34fe8b16f5d8f77311f25bd8a1a778
- SHA512 12d2cba384166d45ff43f10ceb66bb6c1fe256220241c6ea84b71fe04dba112058d0b8155490a0c907f144074d77a1bf347022fe1ed5df8fe64fdc4045240f48
- SSDEEP 12288:NU5rCOTeijW7VZQNBHaNOxwvH/R/r4DY+tFrcTZwlH:NUQOJjWMNNaNHZr4DY+TwTSlH
- TLSH T138B4F026B685C132E68202714AE6EBB26A3F7C318725A4C33794677E2FB16D1D375307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-28_1932b501d940f220110d933ceb223db3_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_1932b501d940f220110d933ceb223db3_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260617-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_1932b501d940f220110d933ceb223db3_elex_mafia_stealc_tofsee
- Size 505KB
- SHA256 43232a29c4ef7c6c61a082037ceb6575ce551d806d2345c0a83b9c3b881527c8
- MD5 1932b501d940f220110d933ceb223db3
- SHA1 a871ae1ffd34fe8b16f5d8f77311f25bd8a1a778
- SHA512 12d2cba384166d45ff43f10ceb66bb6c1fe256220241c6ea84b71fe04dba112058d0b8155490a0c907f144074d77a1bf347022fe1ed5df8fe64fdc4045240f48
- SSDEEP 12288:NU5rCOTeijW7VZQNBHaNOxwvH/R/r4DY+tFrcTZwlH:NUQOJjWMNNaNHZr4DY+TwTSlH
- TLSH T138B4F026B685C132E68202714AE6EBB26A3F7C318725A4C33794677E2FB16D1D375307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.