General
- Target 2026-07-01_d8c58a8178511e12873e6c1b886ff8b0_elex_mafia_stealc_tofsee
- Size 412KB
- Sample260701-p4d8naew6j
- SHA256 ef5053125078cd0edb96cd86ba40f5480bb5f3d29330cc1e02494174449cb5cb
- MD5 d8c58a8178511e12873e6c1b886ff8b0
- SHA1 7f34676af90a3302a5aa50ff6a0933236c170a58
- SHA512 b94a00c0a1a9048d099331f7c9d62192fb4926bb7cc005ef434b3d94861d254533783ccf279840aa4b836db7f66634bbd81efdceb73c509787cd1923fb5fcb5d
- SSDEEP 6144:UooTAQjKG3wDGAeIc9kphIoDZnxP4DBKWKJQjb+2MwcDbjN/HlZ9E25P:U6PCrIc9kph5b8pKJ6MwcDbjVW2J
- TLSH T1EE94D0203681C036E1D216358AE6CBA6197A7E754721A8CB7BD46B7E2F703D1EB35307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-01_d8c58a8178511e12873e6c1b886ff8b0_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_d8c58a8178511e12873e6c1b886ff8b0_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260629-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_d8c58a8178511e12873e6c1b886ff8b0_elex_mafia_stealc_tofsee
- Size 412KB
- SHA256 ef5053125078cd0edb96cd86ba40f5480bb5f3d29330cc1e02494174449cb5cb
- MD5 d8c58a8178511e12873e6c1b886ff8b0
- SHA1 7f34676af90a3302a5aa50ff6a0933236c170a58
- SHA512 b94a00c0a1a9048d099331f7c9d62192fb4926bb7cc005ef434b3d94861d254533783ccf279840aa4b836db7f66634bbd81efdceb73c509787cd1923fb5fcb5d
- SSDEEP 6144:UooTAQjKG3wDGAeIc9kphIoDZnxP4DBKWKJQjb+2MwcDbjN/HlZ9E25P:U6PCrIc9kph5b8pKJ6MwcDbjVW2J
- TLSH T1EE94D0203681C036E1D216358AE6CBA6197A7E754721A8CB7BD46B7E2F703D1EB35307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Deletes itself
Executes dropped EXE
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.