General
- Target 2026-07-01_31db299e7226823ca38bdf3fe3e0af10_elex_mafia_stealc_tofsee
- Size 413KB
- Sample260701-2bpj5sfv2j
- SHA256 b964e14987382811210ae18d00ec2f431af4e766a8a2a19079574f5800e9b8c2
- MD5 31db299e7226823ca38bdf3fe3e0af10
- SHA1 f6db5907ee99f3d38854f3a3d6daadc9610647c1
- SHA512 79223d237be530fdc42873963faec0f6ab55ee95ac7bf2307f574aacdef4e3b16f2db449387308cb6c7a105fc0824272f49d56cde7aaa5c359cfd6eac3bc9730
- SSDEEP 12288:gZLolhNVyEbVvdVeikbckxGugUFImywE8c9qHg:gZqhOEbkikbckQtUFIsct
- TLSH T1D594CF257281C032D19304304BF6EB76153A7DB15B62A5CBB7D83B7E1EB42D1A67A30B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-01_31db299e7226823ca38bdf3fe3e0af10_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_31db299e7226823ca38bdf3fe3e0af10_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260629-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_31db299e7226823ca38bdf3fe3e0af10_elex_mafia_stealc_tofsee
- Size 413KB
- SHA256 b964e14987382811210ae18d00ec2f431af4e766a8a2a19079574f5800e9b8c2
- MD5 31db299e7226823ca38bdf3fe3e0af10
- SHA1 f6db5907ee99f3d38854f3a3d6daadc9610647c1
- SHA512 79223d237be530fdc42873963faec0f6ab55ee95ac7bf2307f574aacdef4e3b16f2db449387308cb6c7a105fc0824272f49d56cde7aaa5c359cfd6eac3bc9730
- SSDEEP 12288:gZLolhNVyEbVvdVeikbckxGugUFImywE8c9qHg:gZqhOEbkikbckQtUFIsct
- TLSH T1D594CF257281C032D19304304BF6EB76153A7DB15B62A5CBB7D83B7E1EB42D1A67A30B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Deletes itself
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.