General
- Target 2026-07-01_ed05d979ad22975c9ab8389f8236ab0f_elex_mafia_stealc_tofsee
- Size 487KB
- Sample260701-pzb8haev3k
- SHA256 7259f5ed936839ec9acd261ed08087ace0f45c2314809243e881a516e1b905e9
- MD5 ed05d979ad22975c9ab8389f8236ab0f
- SHA1 3a2270dc0779dc46b9231a89d5f664b60bebc8e0
- SHA512 6eb48e916ca92fb26fdd3ac61eb7ef4f2aaf3bdaf8c13ebbc51b3e42592dddca29ea785105da8f0e8dfa22a2c474283c957859ead8b8bed00cee68f20a232cc8
- SSDEEP 6144:qorf3lPvovsgZnqG2C7mOTeiL9DU82EhLBkKZetricgHa6cj70S2nfwLFzfRtcVV:HU5rCOTeiJyEh3Z2k6NkwBjTy2xCvNZ
- TLSH T1CEB4F0267981C432E69311314EE2E7B1693A7D716B26A4C37B80777E6FB52E1E630303
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-01_ed05d979ad22975c9ab8389f8236ab0f_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_ed05d979ad22975c9ab8389f8236ab0f_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260629-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_ed05d979ad22975c9ab8389f8236ab0f_elex_mafia_stealc_tofsee
- Size 487KB
- SHA256 7259f5ed936839ec9acd261ed08087ace0f45c2314809243e881a516e1b905e9
- MD5 ed05d979ad22975c9ab8389f8236ab0f
- SHA1 3a2270dc0779dc46b9231a89d5f664b60bebc8e0
- SHA512 6eb48e916ca92fb26fdd3ac61eb7ef4f2aaf3bdaf8c13ebbc51b3e42592dddca29ea785105da8f0e8dfa22a2c474283c957859ead8b8bed00cee68f20a232cc8
- SSDEEP 6144:qorf3lPvovsgZnqG2C7mOTeiL9DU82EhLBkKZetricgHa6cj70S2nfwLFzfRtcVV:HU5rCOTeiJyEh3Z2k6NkwBjTy2xCvNZ
- TLSH T1CEB4F0267981C432E69311314EE2E7B1693A7D716B26A4C37B80777E6FB52E1E630303
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Executes dropped EXE
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.