General
- Target 2026-06-29_adff595cffc8d990c18d1d30ebc6909a_elex_mafia_poet-rat_stealc_tofsee
- Size 1.8MB
- Sample260630-fmdfcsfv9m
- SHA256 343dd55eed2f8052996e99e9ea4eaacb1a21ee5831e2cfd521fdb51bc25647d4
- MD5 adff595cffc8d990c18d1d30ebc6909a
- SHA1 0fcce1c80d3cf57583c05b70f8270995d65ded46
- SHA512 5ddb42e411a941e05a54977ff08966433d5256e5e2ee93ab029aa11affd6088170fc2e49fa2093cf092d0f2c94b99f8af5239b4aed45a2dd993543b79b9532af
- SSDEEP 24576:wUQOJDMgmkmQEdjzp3SuNGEAFC5etW0Ri+aMyFH1KN:w/OJDFmkmQ+3SuNGEADt7i+/yTW
- TLSH T1F895812277FD0608F2F75E752AB6F9504C7ABDA25D21D29D1078908E8D71B80DA63B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-29_adff595cffc8d990c18d1d30ebc6909a_elex_mafia_poet-rat_stealc_tofsee.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-29_adff595cffc8d990c18d1d30ebc6909a_elex_mafia_poet-rat_stealc_tofsee.exe
Resource
win11ltsc2024-20260629-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-29_adff595cffc8d990c18d1d30ebc6909a_elex_mafia_poet-rat_stealc_tofsee
- Size 1.8MB
- SHA256 343dd55eed2f8052996e99e9ea4eaacb1a21ee5831e2cfd521fdb51bc25647d4
- MD5 adff595cffc8d990c18d1d30ebc6909a
- SHA1 0fcce1c80d3cf57583c05b70f8270995d65ded46
- SHA512 5ddb42e411a941e05a54977ff08966433d5256e5e2ee93ab029aa11affd6088170fc2e49fa2093cf092d0f2c94b99f8af5239b4aed45a2dd993543b79b9532af
- SSDEEP 24576:wUQOJDMgmkmQEdjzp3SuNGEAFC5etW0Ri+aMyFH1KN:w/OJDFmkmQ+3SuNGEADt7i+/yTW
- TLSH T1F895812277FD0608F2F75E752AB6F9504C7ABDA25D21D29D1078908E8D71B80DA63B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.