General
- Target 2026-06-26_a1a938547252bdabc1facc3a5bfa863e_elex_mafia_stealc_tofsee
- Size 428KB
- Sample260629-qs1sysev71
- SHA256 04e3f3023bfefcdf0fdbe1ec4c7fc2c4d95f259ec7501f32cdd18edd21598bb4
- MD5 a1a938547252bdabc1facc3a5bfa863e
- SHA1 b28e4e85248630b7ccb0cbaa619ae74164ca84f0
- SHA512 413156a9a38d4d8ce8828650bf5e9dfca2e56022587e52b1d2811818eb1bf0fa422f4abbb9873517e5bf221e0442dfb2580844285926ee27094ecbdfacbc940b
- SSDEEP 6144:gVdvczEb7GUOpYWhNVynE/mFWy/APq+V4U0rrfHbqmTeW7ltJqHR:gZLolhNVyEpPq79f7qbW7NqHR
- TLSH T11494DF25B2C1C032E19305314BE6D7B2653A7DA15F61A4CBB798373D2E703D1AA7A31B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-26_a1a938547252bdabc1facc3a5bfa863e_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-26_a1a938547252bdabc1facc3a5bfa863e_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260629-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-26_a1a938547252bdabc1facc3a5bfa863e_elex_mafia_stealc_tofsee
- Size 428KB
- SHA256 04e3f3023bfefcdf0fdbe1ec4c7fc2c4d95f259ec7501f32cdd18edd21598bb4
- MD5 a1a938547252bdabc1facc3a5bfa863e
- SHA1 b28e4e85248630b7ccb0cbaa619ae74164ca84f0
- SHA512 413156a9a38d4d8ce8828650bf5e9dfca2e56022587e52b1d2811818eb1bf0fa422f4abbb9873517e5bf221e0442dfb2580844285926ee27094ecbdfacbc940b
- SSDEEP 6144:gVdvczEb7GUOpYWhNVynE/mFWy/APq+V4U0rrfHbqmTeW7ltJqHR:gZLolhNVyEpPq79f7qbW7NqHR
- TLSH T11494DF25B2C1C032E19305314BE6D7B2653A7DA15F61A4CBB798373D2E703D1AA7A31B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Deletes itself
Executes dropped EXE
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.