General
- Target 2026-06-27_d8ecf571f76ba97b702e24e2f8b7572a_elex_mafia_stealc_tofsee
- Size 413KB
- Sample260629-ctltjact2m
- SHA256 d911b65bf1aeb5bd8b74d3083ff576d076c2dfa6ad69be6bd634175f76f9a323
- MD5 d8ecf571f76ba97b702e24e2f8b7572a
- SHA1 b327971a9a909983984d54a294ec3971d17dbdae
- SHA512 470e815b022d694384a2f4a1b118b0319cb2e7bbcb44f3261c86c24299c802c20474fc5edf8764987c4aa851156352dda99c56a7c7607f81254088e42030f8a6
- SSDEEP 6144:gVdvczEb7GUOpYWhNVynE/mFipDwCkhDYET7pMsQAHiq3cLQpKAF3ujVqHg:gZLolhNVyEkrNjgiiq9KAFehqHg
- TLSH T16794CF2876C1C036D59601314BBADB36293A7DB15BA1A4CBB3D8377D1E742D1A63A30B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_d8ecf571f76ba97b702e24e2f8b7572a_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_d8ecf571f76ba97b702e24e2f8b7572a_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260617-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_d8ecf571f76ba97b702e24e2f8b7572a_elex_mafia_stealc_tofsee
- Size 413KB
- SHA256 d911b65bf1aeb5bd8b74d3083ff576d076c2dfa6ad69be6bd634175f76f9a323
- MD5 d8ecf571f76ba97b702e24e2f8b7572a
- SHA1 b327971a9a909983984d54a294ec3971d17dbdae
- SHA512 470e815b022d694384a2f4a1b118b0319cb2e7bbcb44f3261c86c24299c802c20474fc5edf8764987c4aa851156352dda99c56a7c7607f81254088e42030f8a6
- SSDEEP 6144:gVdvczEb7GUOpYWhNVynE/mFipDwCkhDYET7pMsQAHiq3cLQpKAF3ujVqHg:gZLolhNVyEkrNjgiiq9KAFehqHg
- TLSH T16794CF2876C1C036D59601314BBADB36293A7DB15BA1A4CBB3D8377D1E742D1A63A30B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Deletes itself
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.