General
- Target 2026-06-26_3ab3ec6e89b47c3b406de5e80cebc19a_elex_mafia_stealc_tofsee
- Size 473KB
- Sample260629-vap1ysbx4p
- SHA256 d0b4fd8f12096ae93b1c8a56ece42b4818ce24a0ca1085d21f246ae2c1c66dee
- MD5 3ab3ec6e89b47c3b406de5e80cebc19a
- SHA1 bbb4f7d7ca3fb27c94ed1b078d39c1f8e4d47617
- SHA512 9666575431419670c07d80507cbc3da4e8c5a46d07fa45006490fffc1eaff050b42b3886700d15c93f7fef53aa124f36a277825ebd887a97bfb5aa577fd1d5c2
- SSDEEP 12288:Nb4bZudi79L/sBpKVX1dUmI4qoWxk1F81dgd43YA0a:Nb4bcdkL/sii478kF83giL
- TLSH T15CA4E0243582C037D2A701354AE687B5663A7DA09F7668C73BD43BBD6EB02E0E634357
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-26_3ab3ec6e89b47c3b406de5e80cebc19a_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-26_3ab3ec6e89b47c3b406de5e80cebc19a_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-26_3ab3ec6e89b47c3b406de5e80cebc19a_elex_mafia_stealc_tofsee
- Size 473KB
- SHA256 d0b4fd8f12096ae93b1c8a56ece42b4818ce24a0ca1085d21f246ae2c1c66dee
- MD5 3ab3ec6e89b47c3b406de5e80cebc19a
- SHA1 bbb4f7d7ca3fb27c94ed1b078d39c1f8e4d47617
- SHA512 9666575431419670c07d80507cbc3da4e8c5a46d07fa45006490fffc1eaff050b42b3886700d15c93f7fef53aa124f36a277825ebd887a97bfb5aa577fd1d5c2
- SSDEEP 12288:Nb4bZudi79L/sBpKVX1dUmI4qoWxk1F81dgd43YA0a:Nb4bcdkL/sii478kF83giL
- TLSH T15CA4E0243582C037D2A701354AE687B5663A7DA09F7668C73BD43BBD6EB02E0E634357
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Deletes itself
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.