General
- Target 2026-06-26_216e8a01802c433f0f6499a48a160ec1_elex_mafia_stealc_tofsee
- Size 652KB
- Sample260629-v7vmpsay6w
- SHA256 a9e49eab6f4132fe38fb55a8a28dde9e3cd7b80155425ef2d6057417750322cc
- MD5 216e8a01802c433f0f6499a48a160ec1
- SHA1 faa5b6be6101184f1d64ce8d932cbf2a96bde6cc
- SHA512 e3107d3c256d805cd3779a80b8f612df2f826508c25399ef4526ed15d30e0fd1982a20720c41c9c19705ee86777687feb9964e95bbdecebbe95278530f758997
- SSDEEP 12288:wU5rCOTeiDPKBMU7KcA0TFBGuY4NZ+3/v+I9hUG2VA:wUQOJDO79A06u9NGEA
- TLSH T1E4E4D02177D8C532E5FB037859B5E6614A7EBD325722D6CF2F9012AE0AB1BC08671723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-26_216e8a01802c433f0f6499a48a160ec1_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-26_216e8a01802c433f0f6499a48a160ec1_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260629-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-26_216e8a01802c433f0f6499a48a160ec1_elex_mafia_stealc_tofsee
- Size 652KB
- SHA256 a9e49eab6f4132fe38fb55a8a28dde9e3cd7b80155425ef2d6057417750322cc
- MD5 216e8a01802c433f0f6499a48a160ec1
- SHA1 faa5b6be6101184f1d64ce8d932cbf2a96bde6cc
- SHA512 e3107d3c256d805cd3779a80b8f612df2f826508c25399ef4526ed15d30e0fd1982a20720c41c9c19705ee86777687feb9964e95bbdecebbe95278530f758997
- SSDEEP 12288:wU5rCOTeiDPKBMU7KcA0TFBGuY4NZ+3/v+I9hUG2VA:wUQOJDO79A06u9NGEA
- TLSH T1E4E4D02177D8C532E5FB037859B5E6614A7EBD325722D6CF2F9012AE0AB1BC08671723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.