General
- Target 2026-07-02_0f204e9454d11bc127000e8e4e28cc3a_elex_mafia_stealc
- Size 435KB
- Sample260702-1bty7afs81
- SHA256 ee6b17e8ab14656f65c32706ce9c4152300abe8d1438fe37b48e10fc7d6e635d
- MD5 0f204e9454d11bc127000e8e4e28cc3a
- SHA1 c9364230422963eb118b409bdb9eacc1507d8ae8
- SHA512 22cfa5dd3da13e95bc15a222ff303e47d3db76d450fe9022c5eeba1bb4392d2103e815f4f29e3d72aac36d06f4cdc345716a9f7f711d5a1c38b2f51d76b0f59f
- SSDEEP 6144:98Xyq4o4aRCTuuqepiq+zQ1mBYU2xuN3Hcfmb9m1ejA6qslVhCBWXzJK:9W4ufepiqKQ1mz8+s1kA61lVM0J
- TLSH T1A994E0317182C037E1A606358BE5CBA5593E7DA54B32A8C77BD42AAF6E702D1CB34347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_0f204e9454d11bc127000e8e4e28cc3a_elex_mafia_stealc.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_0f204e9454d11bc127000e8e4e28cc3a_elex_mafia_stealc.exe
Resource
win11ltsc2024-20260629-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_0f204e9454d11bc127000e8e4e28cc3a_elex_mafia_stealc
- Size 435KB
- SHA256 ee6b17e8ab14656f65c32706ce9c4152300abe8d1438fe37b48e10fc7d6e635d
- MD5 0f204e9454d11bc127000e8e4e28cc3a
- SHA1 c9364230422963eb118b409bdb9eacc1507d8ae8
- SHA512 22cfa5dd3da13e95bc15a222ff303e47d3db76d450fe9022c5eeba1bb4392d2103e815f4f29e3d72aac36d06f4cdc345716a9f7f711d5a1c38b2f51d76b0f59f
- SSDEEP 6144:98Xyq4o4aRCTuuqepiq+zQ1mBYU2xuN3Hcfmb9m1ejA6qslVhCBWXzJK:9W4ufepiqKQ1mz8+s1kA61lVM0J
- TLSH T1A994E0317182C037E1A606358BE5CBA5593E7DA54B32A8C77BD42AAF6E702D1CB34347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Deletes itself
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.