General
- Target 2026-06-27_77812af03f105ce76c2941be04f502d3_elex_mafia_stealc_tofsee
- Size 546KB
- Sample260629-gpmx9afz2r
- SHA256 7019307dd984f17ace1b39e760c710e3483dc36f52db2382358c6d10d04b4e8d
- MD5 77812af03f105ce76c2941be04f502d3
- SHA1 3a017ca5f866e7bd20557e58d902be1c375e85ae
- SHA512 485287186259318d78eb0cf80aa080ab22870fb99d25206e119c777106f6bc850fabc9ed97acaa6845a296b0b74c1091f46d53c543082ca022a5dfc44db01cf2
- SSDEEP 12288:9U5rCOTei6FEedrWMTXdCX4CeXMZdqZoXWjdq:9UQOJ6ueJNMXJdqqGh
- TLSH T14AC4F122B545C032E69312314AE6EBB1297BBD365B2294C73BD4777E6FB12E19334306
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_77812af03f105ce76c2941be04f502d3_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_77812af03f105ce76c2941be04f502d3_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260617-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_77812af03f105ce76c2941be04f502d3_elex_mafia_stealc_tofsee
- Size 546KB
- SHA256 7019307dd984f17ace1b39e760c710e3483dc36f52db2382358c6d10d04b4e8d
- MD5 77812af03f105ce76c2941be04f502d3
- SHA1 3a017ca5f866e7bd20557e58d902be1c375e85ae
- SHA512 485287186259318d78eb0cf80aa080ab22870fb99d25206e119c777106f6bc850fabc9ed97acaa6845a296b0b74c1091f46d53c543082ca022a5dfc44db01cf2
- SSDEEP 12288:9U5rCOTei6FEedrWMTXdCX4CeXMZdqZoXWjdq:9UQOJ6ueJNMXJdqqGh
- TLSH T14AC4F122B545C032E69312314AE6EBB1297BBD365B2294C73BD4777E6FB12E19334306
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Executes dropped EXE
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.