General
- Target 2026-06-29_1cf220647c357884d6714af5ae71c0f5_elex_mafia_stealc_tofsee
- Size 412KB
- Sample260630-pgxfqaey2t
- SHA256 eaba36b6a54250ef5a7b65f6bf2d3761c780b00ee7d79f2c5f6bb86bbb6c797c
- MD5 1cf220647c357884d6714af5ae71c0f5
- SHA1 6223c3a95e20b5f08ac00494b23095c7483129f0
- SHA512 9d0d5ca4512aaa435657218faf9d60fc8db80a9f8156b54a38dfd3d56e5bc8ed41d1bdeacc0e63e738bc3291f1ada32b2679670287a9df032bd2ed3a52bcf728
- SSDEEP 12288:U6PCrIc9kph5GtXnWw84n+4XAZqxX4Hrz:U6QIcOh5GtXnCE+zYWr
- TLSH T11894E1243581C037E2A305358AEACB66293E7D355722B9C76BD427AE6E703D1EB35307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-29_1cf220647c357884d6714af5ae71c0f5_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-29_1cf220647c357884d6714af5ae71c0f5_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260629-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-29_1cf220647c357884d6714af5ae71c0f5_elex_mafia_stealc_tofsee
- Size 412KB
- SHA256 eaba36b6a54250ef5a7b65f6bf2d3761c780b00ee7d79f2c5f6bb86bbb6c797c
- MD5 1cf220647c357884d6714af5ae71c0f5
- SHA1 6223c3a95e20b5f08ac00494b23095c7483129f0
- SHA512 9d0d5ca4512aaa435657218faf9d60fc8db80a9f8156b54a38dfd3d56e5bc8ed41d1bdeacc0e63e738bc3291f1ada32b2679670287a9df032bd2ed3a52bcf728
- SSDEEP 12288:U6PCrIc9kph5GtXnWw84n+4XAZqxX4Hrz:U6QIcOh5GtXnCE+zYWr
- TLSH T11894E1243581C037E2A305358AEACB66293E7D355722B9C76BD427AE6E703D1EB35307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Deletes itself
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.