General
- Target 2026-06-27_64cceec18fb24635476701beda659be9_elex_mafia_stealc_tofsee
- Size 652KB
- Sample260629-hemp6sft2s
- SHA256 5b4d3b8d1b393d5053526cd2dc5ceceb1ce2eb7bdcd368cb9c73abec4592ff1c
- MD5 64cceec18fb24635476701beda659be9
- SHA1 ce1e3771ce239af7c452745a06f1959093dc8024
- SHA512 863cee96c77f0a31f8f555d684fed0ee463178c45308696e9c872a455c798f3540c4871a55b6527bbb3f8eba97c7f9dcd7b7d44f154f1c7d4625c4fc75f1324d
- SSDEEP 12288:wU5rCOTeiDQQikMbDMIyQrXFXHf73ap0adNZ+3/v+I9hUG2VA:wUQOJDQKMLrVXraqadNGEA
- TLSH T111E4D12173D88532E9FB037859B5B6614D7DBD326722D6CF2B8016AE0EB1BC09671723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_64cceec18fb24635476701beda659be9_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_64cceec18fb24635476701beda659be9_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260617-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_64cceec18fb24635476701beda659be9_elex_mafia_stealc_tofsee
- Size 652KB
- SHA256 5b4d3b8d1b393d5053526cd2dc5ceceb1ce2eb7bdcd368cb9c73abec4592ff1c
- MD5 64cceec18fb24635476701beda659be9
- SHA1 ce1e3771ce239af7c452745a06f1959093dc8024
- SHA512 863cee96c77f0a31f8f555d684fed0ee463178c45308696e9c872a455c798f3540c4871a55b6527bbb3f8eba97c7f9dcd7b7d44f154f1c7d4625c4fc75f1324d
- SSDEEP 12288:wU5rCOTeiDQQikMbDMIyQrXFXHf73ap0adNZ+3/v+I9hUG2VA:wUQOJDQKMLrVXraqadNGEA
- TLSH T111E4D12173D88532E9FB037859B5B6614D7DBD326722D6CF2B8016AE0EB1BC09671723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.