General
- Target 2026-06-27_62b54f1a111b7a1b5b2ce382e86471ca_elex_mafia_stealc_tofsee
- Size 411KB
- Sample260629-hhgnbsft9s
- SHA256 4d21a6791167bd2b1e9c1cb249fd1f1cf26ec307d4536d75edb712cb838d7e84
- MD5 62b54f1a111b7a1b5b2ce382e86471ca
- SHA1 18917f997e1a16a7fdb2120e67d379ed33ffd692
- SHA512 ae81f0263793d4c5eda359d776a676efca0d02991083726189e62551e8f5164d9d4c7f46dcf08c9f3ebd90e7b0c2603a817388b6b9e7475846e30fcf3ba634e9
- SSDEEP 6144:gVdvczEb7GUOpYWhNVynE/mFeojoV1Gb7dVMAln8Zut9k24M35DiZ2RnbqHI:gZLolhNVyEjoh7xq69k2T9BRbqHI
- TLSH T12F94CF29B281C036D59301314BE6E776253A7DB55B6264CBB3943B7E1F703D1AA3A30B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_62b54f1a111b7a1b5b2ce382e86471ca_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_62b54f1a111b7a1b5b2ce382e86471ca_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260617-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_62b54f1a111b7a1b5b2ce382e86471ca_elex_mafia_stealc_tofsee
- Size 411KB
- SHA256 4d21a6791167bd2b1e9c1cb249fd1f1cf26ec307d4536d75edb712cb838d7e84
- MD5 62b54f1a111b7a1b5b2ce382e86471ca
- SHA1 18917f997e1a16a7fdb2120e67d379ed33ffd692
- SHA512 ae81f0263793d4c5eda359d776a676efca0d02991083726189e62551e8f5164d9d4c7f46dcf08c9f3ebd90e7b0c2603a817388b6b9e7475846e30fcf3ba634e9
- SSDEEP 6144:gVdvczEb7GUOpYWhNVynE/mFeojoV1Gb7dVMAln8Zut9k24M35DiZ2RnbqHI:gZLolhNVyEjoh7xq69k2T9BRbqHI
- TLSH T12F94CF29B281C036D59301314BE6E776253A7DB55B6264CBB3943B7E1F703D1AA3A30B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Deletes itself
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.