General
- Target 2026-06-30_1cfb14dc68faa146bae7f854fef4fb08_elex_mafia_stealc
- Size 435KB
- Sample260701-am41esa13m
- SHA256 1de9f0c3f6b6749894ac915e0c621a6fe2486157e4e587553ff2bff2a0e8a7c9
- MD5 1cfb14dc68faa146bae7f854fef4fb08
- SHA1 d325beba5d1f3145de8442804ab561c303b01a5e
- SHA512 1309cf845450cff5d54d78ffb5a54b8876131d945686fd8bf84b41f0e3b04d8f883e86b6ca333a4632a55b9a8e4eb12d80b7fc85ef6d49a4adac87d83901f168
- SSDEEP 6144:98Xyq4o4aRCTuuqepiq+zQ1mBYCfEkyj7l6yUo3/OdC3HLoGvJF0CcJJK:9W4ufepiqKQ1mBaJzuC0GvUrJ
- TLSH T15C94E1357586C037D1A702344BE6CBAA596A7DA54B32B4C37BD42BAE6F342C1CA34347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-30_1cfb14dc68faa146bae7f854fef4fb08_elex_mafia_stealc.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-30_1cfb14dc68faa146bae7f854fef4fb08_elex_mafia_stealc.exe
Resource
win11ltsc2024-20260629-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_1cfb14dc68faa146bae7f854fef4fb08_elex_mafia_stealc
- Size 435KB
- SHA256 1de9f0c3f6b6749894ac915e0c621a6fe2486157e4e587553ff2bff2a0e8a7c9
- MD5 1cfb14dc68faa146bae7f854fef4fb08
- SHA1 d325beba5d1f3145de8442804ab561c303b01a5e
- SHA512 1309cf845450cff5d54d78ffb5a54b8876131d945686fd8bf84b41f0e3b04d8f883e86b6ca333a4632a55b9a8e4eb12d80b7fc85ef6d49a4adac87d83901f168
- SSDEEP 6144:98Xyq4o4aRCTuuqepiq+zQ1mBYCfEkyj7l6yUo3/OdC3HLoGvJF0CcJJK:9W4ufepiqKQ1mBaJzuC0GvUrJ
- TLSH T15C94E1357586C037D1A702344BE6CBAA596A7DA54B32B4C37BD42BAE6F342C1CA34347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Deletes itself
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.