General
- Target 2026-07-01_e7f162daf8c421e8181edd32c8ca7f25_elex_mafia_stealc_tofsee
- Size 652KB
- Sample260701-wsd7vabx6m
- SHA256 b5a76b8ede075e3642cf482d0c97d938dba5646aa40c5bff432c443a5588acc8
- MD5 e7f162daf8c421e8181edd32c8ca7f25
- SHA1 b98e5f6c846caaa64f067d35849250ab811e057d
- SHA512 544d2fedb896c5a87467428a532afbf41ceef401ce3ab7c47bd35e4521fcdcfad5c40c9eb85c6defad5dafabb0e2eb48f1e7da7a8abd2f2b8c16d669b8cbd79e
- SSDEEP 12288:wU5rCOTeiDekD+dpkff5M0OerCyePLQrESITNZ+3/v+I9hUG2VA:wUQOJDpDbfMsPePL/3NGEA
- TLSH T15AE4E12073D88536D5FB037859B5E6605D7EBD329722D6CF6F9026AE09B1BC08A70723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-01_e7f162daf8c421e8181edd32c8ca7f25_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_e7f162daf8c421e8181edd32c8ca7f25_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260629-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_e7f162daf8c421e8181edd32c8ca7f25_elex_mafia_stealc_tofsee
- Size 652KB
- SHA256 b5a76b8ede075e3642cf482d0c97d938dba5646aa40c5bff432c443a5588acc8
- MD5 e7f162daf8c421e8181edd32c8ca7f25
- SHA1 b98e5f6c846caaa64f067d35849250ab811e057d
- SHA512 544d2fedb896c5a87467428a532afbf41ceef401ce3ab7c47bd35e4521fcdcfad5c40c9eb85c6defad5dafabb0e2eb48f1e7da7a8abd2f2b8c16d669b8cbd79e
- SSDEEP 12288:wU5rCOTeiDekD+dpkff5M0OerCyePLQrESITNZ+3/v+I9hUG2VA:wUQOJDpDbfMsPePL/3NGEA
- TLSH T15AE4E12073D88536D5FB037859B5E6605D7EBD329722D6CF6F9026AE09B1BC08A70723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.