General
- Target 2026-06-27_de3ee379b5881447d4d1f32e6b500063_elex_mafia_stealc_tofsee
- Size 412KB
- Sample260629-clep9aaz6y
- SHA256 b52c2427669f18740601e8961423c97df4c1f7fdd602f43047db18bd2e17eee8
- MD5 de3ee379b5881447d4d1f32e6b500063
- SHA1 42639cf0f0ae0292053a568ba065fd1660ead569
- SHA512 06c4c1dee71fa63ed1a183909420e0a8dd0b9a6a4551851dc735c24e0750ade52b206ef8e58ab6bfc75aef997d480b381b582a7abcd20aec1dd5e30da51b1463
- SSDEEP 12288:U6PCrIc9kph5q48HCiwfMUvBL+0EiL/Mw:U6QIcOh5q48iiKlV1ES/
- TLSH T1FE94D0243581C036E19315358AEADB67293E7E754B6169C77BD4BBAE2E702C0EB34307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_de3ee379b5881447d4d1f32e6b500063_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_de3ee379b5881447d4d1f32e6b500063_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260618-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_de3ee379b5881447d4d1f32e6b500063_elex_mafia_stealc_tofsee
- Size 412KB
- SHA256 b52c2427669f18740601e8961423c97df4c1f7fdd602f43047db18bd2e17eee8
- MD5 de3ee379b5881447d4d1f32e6b500063
- SHA1 42639cf0f0ae0292053a568ba065fd1660ead569
- SHA512 06c4c1dee71fa63ed1a183909420e0a8dd0b9a6a4551851dc735c24e0750ade52b206ef8e58ab6bfc75aef997d480b381b582a7abcd20aec1dd5e30da51b1463
- SSDEEP 12288:U6PCrIc9kph5q48HCiwfMUvBL+0EiL/Mw:U6QIcOh5q48iiKlV1ES/
- TLSH T1FE94D0243581C036E19315358AEADB67293E7E754B6169C77BD4BBAE2E702C0EB34307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Deletes itself
Executes dropped EXE
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.