General
- Target 2026-06-27_99824825afe2f54fe698ae2f07036af3_elex_mafia_stealc_tofsee
- Size 505KB
- Sample260629-fd3znaew2r
- SHA256 091d3e535297131b3abff0064a7389368c2a0a1f1c1043b0c1fe96bbcd12d473
- MD5 99824825afe2f54fe698ae2f07036af3
- SHA1 0136737124844c187c544f9c08601ba2e794ac2e
- SHA512 a4b9fe38172704c2e860eb30c9e0139619ce9f096dc9f1d2260b7db29b3b45f1c3d8cb5a0018c8ce9b4ea37fc2ec64a15a9e75f7d682cd16536d5948edb9ec63
- SSDEEP 6144:oorf3lPvovsgZnqG2C7mOTeiL/DLjjLDrnDxxv2uW3fVQmr0EVElHwLIn4z+Y71o:NU5rCOTeijnXuuWJr0pa+YngxWTZwlH
- TLSH T11CB4F1257685C532E6D202714AE6DBB26D3BBC355726A4C33B94A27E2EB17E0D374303
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_99824825afe2f54fe698ae2f07036af3_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_99824825afe2f54fe698ae2f07036af3_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260617-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_99824825afe2f54fe698ae2f07036af3_elex_mafia_stealc_tofsee
- Size 505KB
- SHA256 091d3e535297131b3abff0064a7389368c2a0a1f1c1043b0c1fe96bbcd12d473
- MD5 99824825afe2f54fe698ae2f07036af3
- SHA1 0136737124844c187c544f9c08601ba2e794ac2e
- SHA512 a4b9fe38172704c2e860eb30c9e0139619ce9f096dc9f1d2260b7db29b3b45f1c3d8cb5a0018c8ce9b4ea37fc2ec64a15a9e75f7d682cd16536d5948edb9ec63
- SSDEEP 6144:oorf3lPvovsgZnqG2C7mOTeiL/DLjjLDrnDxxv2uW3fVQmr0EVElHwLIn4z+Y71o:NU5rCOTeijnXuuWJr0pa+YngxWTZwlH
- TLSH T11CB4F1257685C532E6D202714AE6DBB26D3BBC355726A4C33B94A27E2EB17E0D374303
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.