General
- Target 2026-07-02_198b4b89fee2f6dd6565d00241ebd4b7_elex_mafia_stealc_tofsee
- Size 652KB
- Sample260702-hdb72sds9w
- SHA256 4feb07ec7c242001a95411492cc095a1c231677835303dbcbf3470f07b7d0799
- MD5 198b4b89fee2f6dd6565d00241ebd4b7
- SHA1 2c03203eb1506970f1823f5ce25c741243decb96
- SHA512 e068fb6d14e70bc0520b5049970e781aa18e5d0cc84d8a68498fec6ca62a87025819fe5eed72d1f279ba9e3d1a21fa891a8186f74c420aebd31dedefcddefad3
- SSDEEP 12288:wU5rCOTeiD41iuV+RSYr9Ba1YGXdzsbNZ+3/v+I9hUG2VA:wUQOJD4V+YQBa1xxUNGEA
- TLSH T10DE4D02173D88532E5FB037859B5E6654EBEBD326722D6CF2F8016AE0971BC08631723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_198b4b89fee2f6dd6565d00241ebd4b7_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_198b4b89fee2f6dd6565d00241ebd4b7_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260629-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_198b4b89fee2f6dd6565d00241ebd4b7_elex_mafia_stealc_tofsee
- Size 652KB
- SHA256 4feb07ec7c242001a95411492cc095a1c231677835303dbcbf3470f07b7d0799
- MD5 198b4b89fee2f6dd6565d00241ebd4b7
- SHA1 2c03203eb1506970f1823f5ce25c741243decb96
- SHA512 e068fb6d14e70bc0520b5049970e781aa18e5d0cc84d8a68498fec6ca62a87025819fe5eed72d1f279ba9e3d1a21fa891a8186f74c420aebd31dedefcddefad3
- SSDEEP 12288:wU5rCOTeiD41iuV+RSYr9Ba1YGXdzsbNZ+3/v+I9hUG2VA:wUQOJD4V+YQBa1xxUNGEA
- TLSH T10DE4D02173D88532E5FB037859B5E6654EBEBD326722D6CF2F8016AE0971BC08631723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.