General
- Target 2026-07-02_bae03cc473fc772c3fa1b596b183b28e_elex_mafia_stealc_tofsee
- Size 644KB
- Sample260702-m5qa7sgw5t
- SHA256 9e8f82decf30a8da1c0248e04b70dca4a96cac1aec10a0116956ffcacb43aa8a
- MD5 bae03cc473fc772c3fa1b596b183b28e
- SHA1 e529ba9c0510a491cedc882deb069eec98f919f7
- SHA512 58223615fed27ea3962270610896ee3e5cc9dce516e473786c3803449f061723f36f3190ba8c8910ea7e31932e60ddd953be39bfd7471a18d5729e98f9081fe0
- SSDEEP 12288:9U5rCOTei600Dfoo3lVe0iO/5QtDmHZEAZDM9/qZoXWjdqpby1grA70G+o:9UQOJ6foo3+0iUcDmHZEjxqqGh4yATXo
- TLSH T1A4E401257984C032F9D612304EE2EBB1597A7C755722A4C7BB84672E6FB22E19338307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_bae03cc473fc772c3fa1b596b183b28e_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_bae03cc473fc772c3fa1b596b183b28e_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260629-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_bae03cc473fc772c3fa1b596b183b28e_elex_mafia_stealc_tofsee
- Size 644KB
- SHA256 9e8f82decf30a8da1c0248e04b70dca4a96cac1aec10a0116956ffcacb43aa8a
- MD5 bae03cc473fc772c3fa1b596b183b28e
- SHA1 e529ba9c0510a491cedc882deb069eec98f919f7
- SHA512 58223615fed27ea3962270610896ee3e5cc9dce516e473786c3803449f061723f36f3190ba8c8910ea7e31932e60ddd953be39bfd7471a18d5729e98f9081fe0
- SSDEEP 12288:9U5rCOTei600Dfoo3lVe0iO/5QtDmHZEAZDM9/qZoXWjdqpby1grA70G+o:9UQOJ6foo3+0iUcDmHZEjxqqGh4yATXo
- TLSH T1A4E401257984C032F9D612304EE2EBB1597A7C755722A4C7BB84672E6FB22E19338307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.