General
- Target 2026-06-27_9c8082754ce2b6247d4d7143e796504b_elex_mafia_stealc_tofsee
- Size 505KB
- Sample260629-e95yfsds6t
- SHA256 ae491f36b9d0741f4f9387856cf82acaec63f296c364da7c0d4b1a3ac787984d
- MD5 9c8082754ce2b6247d4d7143e796504b
- SHA1 646ace22160efeb169995d297f099e62212f3206
- SHA512 2b924bc1781b8983faf71d25ff62d0a2d5b29a86be6bff97dcd914c07bdbac5d06cdcee7a62bd64d8436aaf21ba0aac9d42368a2ac3cc17163b84a09ef6f21c0
- SSDEEP 12288:NU5rCOTeijHQXVl8/8TEy+rpP+ZsXBlScX3rmDt99TZwlH:NUQOJjHQFgsMPdXxyv9TSlH
- TLSH T181B4E026B585C032E69201714EE6E7F26A3B7D315B22A9C33BC4662E2FB52D1D375307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_9c8082754ce2b6247d4d7143e796504b_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_9c8082754ce2b6247d4d7143e796504b_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260618-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_9c8082754ce2b6247d4d7143e796504b_elex_mafia_stealc_tofsee
- Size 505KB
- SHA256 ae491f36b9d0741f4f9387856cf82acaec63f296c364da7c0d4b1a3ac787984d
- MD5 9c8082754ce2b6247d4d7143e796504b
- SHA1 646ace22160efeb169995d297f099e62212f3206
- SHA512 2b924bc1781b8983faf71d25ff62d0a2d5b29a86be6bff97dcd914c07bdbac5d06cdcee7a62bd64d8436aaf21ba0aac9d42368a2ac3cc17163b84a09ef6f21c0
- SSDEEP 12288:NU5rCOTeijHQXVl8/8TEy+rpP+ZsXBlScX3rmDt99TZwlH:NUQOJjHQFgsMPdXxyv9TSlH
- TLSH T181B4E026B585C032E69201714EE6E7F26A3B7D315B22A9C33BC4662E2FB52D1D375307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.