General
- Target 2026-06-27_da8219106dcaa650b0b90f45a4471641_elex_mafia_stealc_tofsee
- Size 505KB
- Sample260629-cqynxsa17s
- SHA256 afe68f84cb161955a76a864e23de9f774bcc8465045634e325325de2a7f18b5b
- MD5 da8219106dcaa650b0b90f45a4471641
- SHA1 f83cac9b03279f761a4fb9aa012d525da30e4864
- SHA512 2ddc8d71052de4177cf6ee7280b3e1973c0dc330df7d2258187dd647cd20a81965a4bc6a9f11c0ecbdc9f789217c1fe80909e58c4ba78d5af00d0f3d1269fe0f
- SSDEEP 6144:oorf3lPvovsgZnqG2C7mOTeiL/DLCjePAEmmAwkz8+a5XhMf3Sb6uxGCa1ht8EqD:NU5rCOTeijSkLvI8vMPY6ucjxTZwlH
- TLSH T1A8B4F125B685C133E58202750AD6EBB26A3A7C758726A4C73BD4A27E2FB13D1D774303
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_da8219106dcaa650b0b90f45a4471641_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_da8219106dcaa650b0b90f45a4471641_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260618-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_da8219106dcaa650b0b90f45a4471641_elex_mafia_stealc_tofsee
- Size 505KB
- SHA256 afe68f84cb161955a76a864e23de9f774bcc8465045634e325325de2a7f18b5b
- MD5 da8219106dcaa650b0b90f45a4471641
- SHA1 f83cac9b03279f761a4fb9aa012d525da30e4864
- SHA512 2ddc8d71052de4177cf6ee7280b3e1973c0dc330df7d2258187dd647cd20a81965a4bc6a9f11c0ecbdc9f789217c1fe80909e58c4ba78d5af00d0f3d1269fe0f
- SSDEEP 6144:oorf3lPvovsgZnqG2C7mOTeiL/DLCjePAEmmAwkz8+a5XhMf3Sb6uxGCa1ht8EqD:NU5rCOTeijSkLvI8vMPY6ucjxTZwlH
- TLSH T1A8B4F125B685C133E58202750AD6EBB26A3A7C758726A4C73BD4A27E2FB13D1D774303
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Executes dropped EXE
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.