General
- Target 2026-06-26_4f47afa6777fc4e21d3fd150f2f573bb_elex_mafia_stealc_tofsee
- Size 505KB
- Sample260629-tlkd6shv2x
- SHA256 56ba2a9293a5635fe5a619c572b20ba8c04310145edb4801c3d3c7364d8d1d9d
- MD5 4f47afa6777fc4e21d3fd150f2f573bb
- SHA1 6f9eb893284e641e95e03cf8c422599da2c4775f
- SHA512 ef375e0d7a6900c184b97beedaad82c566493c1766c6cd457face924bde1936017e237c7449a1aa61155661497a110127b66a733789d63fa137c241f0a1f528c
- SSDEEP 12288:NU5rCOTeijdMGiNfmVgrknB+h5V9+TZwlH:NUQOJjdMhZmVtB+h5VETSlH
- TLSH T11EB4F1257244C532E59302740EE6EBB16A3F7D35972AA0C32B94663E2FB16E1E375307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-26_4f47afa6777fc4e21d3fd150f2f573bb_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-26_4f47afa6777fc4e21d3fd150f2f573bb_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260629-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-26_4f47afa6777fc4e21d3fd150f2f573bb_elex_mafia_stealc_tofsee
- Size 505KB
- SHA256 56ba2a9293a5635fe5a619c572b20ba8c04310145edb4801c3d3c7364d8d1d9d
- MD5 4f47afa6777fc4e21d3fd150f2f573bb
- SHA1 6f9eb893284e641e95e03cf8c422599da2c4775f
- SHA512 ef375e0d7a6900c184b97beedaad82c566493c1766c6cd457face924bde1936017e237c7449a1aa61155661497a110127b66a733789d63fa137c241f0a1f528c
- SSDEEP 12288:NU5rCOTeijdMGiNfmVgrknB+h5V9+TZwlH:NUQOJjdMhZmVtB+h5VETSlH
- TLSH T11EB4F1257244C532E59302740EE6EBB16A3F7D35972AA0C32B94663E2FB16E1E375307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.