General
- Target 2026-07-02_0b291bb7a0c20e9ba3d8f7f939f51422_elex_mafia_stealc_tofsee
- Size 479KB
- Sample260702-1d3n4scs2k
- SHA256 3740fbcd0ce4166ad532e11c935476fe9963470915b5eda4778a86ad15d551b9
- MD5 0b291bb7a0c20e9ba3d8f7f939f51422
- SHA1 3c803c3d61e704a7637df0c3d78968e878229e99
- SHA512 e2a918d87d2d213d31c60cc250d6af0f7485ca537e11972b6167bad2c07bc42317dfc8298611426c390d952734804e317ce804f1180a22c16408a1f2546e8821
- SSDEEP 12288:9O4rfItL8HA5q42m+Uji+mXyqEszmUgpmtOfO/5y75UO:9O4rQtGA5qFmCXyN9WQVUO
- TLSH T159A4F12AB6818133D29302751BE6D7AA763E75B50326A8C33BD8027D1F716E1D73634B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_0b291bb7a0c20e9ba3d8f7f939f51422_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_0b291bb7a0c20e9ba3d8f7f939f51422_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260629-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_0b291bb7a0c20e9ba3d8f7f939f51422_elex_mafia_stealc_tofsee
- Size 479KB
- SHA256 3740fbcd0ce4166ad532e11c935476fe9963470915b5eda4778a86ad15d551b9
- MD5 0b291bb7a0c20e9ba3d8f7f939f51422
- SHA1 3c803c3d61e704a7637df0c3d78968e878229e99
- SHA512 e2a918d87d2d213d31c60cc250d6af0f7485ca537e11972b6167bad2c07bc42317dfc8298611426c390d952734804e317ce804f1180a22c16408a1f2546e8821
- SSDEEP 12288:9O4rfItL8HA5q42m+Uji+mXyqEszmUgpmtOfO/5y75UO:9O4rQtGA5qFmCXyN9WQVUO
- TLSH T159A4F12AB6818133D29302751BE6D7AA763E75B50326A8C33BD8027D1F716E1D73634B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Deletes itself
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.