General
- Target 2026-06-29_e7cfd0ac5283aacd27689b5fce1c474c_elex_mafia_stealc_tofsee
- Size 468KB
- Sample260630-cffelact9s
- SHA256 bbbb5c82d3a3025782f20de0c101b13720bc9e13ffce35b45c1c49f82feeca27
- MD5 e7cfd0ac5283aacd27689b5fce1c474c
- SHA1 a74607d7f4093b4cfaf332ec7f4a5672b70bb381
- SHA512 b2085ffdd3d75c164839cb894a823d2a7c0c53e1b8d60c209bc1ece72dba00447a63ed8913ed869a12de6965a0945b7e96d9c003c8328727fd00f15d42511019
- SSDEEP 12288:qO4rfItL8HGP9hNEsUzwplJ3Y5SKkk/hQ/07bWmeEVGL:qO4rQtGGfOsXlm5SKJJQMumeEVGL
- TLSH T1D1A4F12A7680C133D29312355BE6D7A6A73E79B4072694C337D4427E1F627E1E33A34A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-29_e7cfd0ac5283aacd27689b5fce1c474c_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-29_e7cfd0ac5283aacd27689b5fce1c474c_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-29_e7cfd0ac5283aacd27689b5fce1c474c_elex_mafia_stealc_tofsee
- Size 468KB
- SHA256 bbbb5c82d3a3025782f20de0c101b13720bc9e13ffce35b45c1c49f82feeca27
- MD5 e7cfd0ac5283aacd27689b5fce1c474c
- SHA1 a74607d7f4093b4cfaf332ec7f4a5672b70bb381
- SHA512 b2085ffdd3d75c164839cb894a823d2a7c0c53e1b8d60c209bc1ece72dba00447a63ed8913ed869a12de6965a0945b7e96d9c003c8328727fd00f15d42511019
- SSDEEP 12288:qO4rfItL8HGP9hNEsUzwplJ3Y5SKkk/hQ/07bWmeEVGL:qO4rQtGGfOsXlm5SKJJQMumeEVGL
- TLSH T1D1A4F12A7680C133D29312355BE6D7A6A73E79B4072694C337D4427E1F627E1E33A34A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Deletes itself
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.