General
- Target 2026-06-26_fd722454cb24210dbedbc3966ddbebbc_elex_mafia_poet-rat_stealc_tofsee
- Size 3.6MB
- Sample260629-mwfqeaa19s
- SHA256 7fa33768c876e8fe799061c80b884cb6935dba73da03c72b0a803b028883b218
- MD5 fd722454cb24210dbedbc3966ddbebbc
- SHA1 a385ba9f8368b835750790995000b35a9e25fa3a
- SHA512 1c4afaf4a6a19933f17c76ff437590d50b693e9bf376f58dffab40cbafe47a1cd3d149155b14b1873a4592e4e77a8af0563aa013ace7b81eaa52e4abb6919b7f
- SSDEEP 49152:w/OJDahig+PBFUoNGEADt7i+/yTukuFGNLrkBirx:EOghN+PfhchrSiGdkBirx
- TLSH T18D06931137FAC635F2BF8B316EB2E694197BF9A29D51C25F2069424E1C35B408E63732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-26_fd722454cb24210dbedbc3966ddbebbc_elex_mafia_poet-rat_stealc_tofsee.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-26_fd722454cb24210dbedbc3966ddbebbc_elex_mafia_poet-rat_stealc_tofsee.exe
Resource
win11ltsc2024-20260617-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-26_fd722454cb24210dbedbc3966ddbebbc_elex_mafia_poet-rat_stealc_tofsee
- Size 3.6MB
- SHA256 7fa33768c876e8fe799061c80b884cb6935dba73da03c72b0a803b028883b218
- MD5 fd722454cb24210dbedbc3966ddbebbc
- SHA1 a385ba9f8368b835750790995000b35a9e25fa3a
- SHA512 1c4afaf4a6a19933f17c76ff437590d50b693e9bf376f58dffab40cbafe47a1cd3d149155b14b1873a4592e4e77a8af0563aa013ace7b81eaa52e4abb6919b7f
- SSDEEP 49152:w/OJDahig+PBFUoNGEADt7i+/yTukuFGNLrkBirx:EOghN+PfhchrSiGdkBirx
- TLSH T18D06931137FAC635F2BF8B316EB2E694197BF9A29D51C25F2069424E1C35B408E63732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.