General
- Target 2026-07-01_ad083cc42eb96fd8510c1f7236a97f3a_elex_mafia_stealc_tofsee
- Size 546KB
- Sample260701-sd3ecaaw3v
- SHA256 3b9423223c74b49f0826b8320e71662b8d5cb7d29c604c5cae73c74134b204bd
- MD5 ad083cc42eb96fd8510c1f7236a97f3a
- SHA1 7e4312e2eb47eae5fc525f2966da28c9b84eb26a
- SHA512 fd1c07aec2d33cd215811c02f14e27ab30c5394b66f69e20519971ede64c47ee693b244adb310ab579e509fa0b20517adf3323e8d9d23ba45db673d03e3027ab
- SSDEEP 12288:9U5rCOTei6wIuCEUZcESK6mZ7WUI0qZoXWjdq:9UQOJ6wqWQCUI0qqGh
- TLSH T1C5C4F121B544C032E9D202304AE6EBB1597FBD359B2664C77BC0676E2FB52E1A778307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-01_ad083cc42eb96fd8510c1f7236a97f3a_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_ad083cc42eb96fd8510c1f7236a97f3a_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260629-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_ad083cc42eb96fd8510c1f7236a97f3a_elex_mafia_stealc_tofsee
- Size 546KB
- SHA256 3b9423223c74b49f0826b8320e71662b8d5cb7d29c604c5cae73c74134b204bd
- MD5 ad083cc42eb96fd8510c1f7236a97f3a
- SHA1 7e4312e2eb47eae5fc525f2966da28c9b84eb26a
- SHA512 fd1c07aec2d33cd215811c02f14e27ab30c5394b66f69e20519971ede64c47ee693b244adb310ab579e509fa0b20517adf3323e8d9d23ba45db673d03e3027ab
- SSDEEP 12288:9U5rCOTei6wIuCEUZcESK6mZ7WUI0qZoXWjdq:9UQOJ6wqWQCUI0qqGh
- TLSH T1C5C4F121B544C032E9D202304AE6EBB1597FBD359B2664C77BC0676E2FB52E1A778307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.