General
- Target 2026-07-02_a6c20abab86c8139a42dce4ce8b4bfdf_elex_mafia_stealc_tofsee
- Size 411KB
- Sample260702-p75vsaex3v
- SHA256 7f84dea72e3fe69bedddf94541b70e32018a08bf64900f395b7b9c8bc2c1a1ac
- MD5 a6c20abab86c8139a42dce4ce8b4bfdf
- SHA1 14abf30dc00c8645530681f2d4057bebf6e2cdc0
- SHA512 fc8e80ce31444b3d967660f37ca644c8e733d502466468e93301d93c4cfa62beec7a6f6194d310eb800c32153564705d0d6320bba32a09de958d5f2c7eb68815
- SSDEEP 6144:gVdvczEb7GUOpYWhNVynE/mFkTZF6yiOs+fSktSwL+ydDPJNexh1qHI:gZLolhNVyERT/6KiwL+Ph1qHI
- TLSH T1A794CF257281C036D59301314BBADB76153A7DB15B6264CBB3D83B6D1FB03E1AA7A30B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_a6c20abab86c8139a42dce4ce8b4bfdf_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_a6c20abab86c8139a42dce4ce8b4bfdf_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260629-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_a6c20abab86c8139a42dce4ce8b4bfdf_elex_mafia_stealc_tofsee
- Size 411KB
- SHA256 7f84dea72e3fe69bedddf94541b70e32018a08bf64900f395b7b9c8bc2c1a1ac
- MD5 a6c20abab86c8139a42dce4ce8b4bfdf
- SHA1 14abf30dc00c8645530681f2d4057bebf6e2cdc0
- SHA512 fc8e80ce31444b3d967660f37ca644c8e733d502466468e93301d93c4cfa62beec7a6f6194d310eb800c32153564705d0d6320bba32a09de958d5f2c7eb68815
- SSDEEP 6144:gVdvczEb7GUOpYWhNVynE/mFkTZF6yiOs+fSktSwL+ydDPJNexh1qHI:gZLolhNVyERT/6KiwL+Ph1qHI
- TLSH T1A794CF257281C036D59301314BBADB76153A7DB15B6264CBB3D83B6D1FB03E1AA7A30B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Deletes itself
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.