General
- Target 2026-07-02_49fc78e2eadc7d18ef0cc24d4e436c47_elex_mafia_stealc_tofsee
- Size 529KB
- Sample260702-qlg29scs5p
- SHA256 d27d8530654554d2f70e27cf51276d01ad05662b344498e10262091834456bc8
- MD5 49fc78e2eadc7d18ef0cc24d4e436c47
- SHA1 48806c945d25b0da66b97659341ab4b23efdbf68
- SHA512 1872678bd61b7c296b08ad31458dbe37998ff7d8ef5364bf7c38c337c510ca6a8e141df4b323488c76da0776c9354776f448507aa05d5d7f4a100a7d59cd7a48
- SSDEEP 12288:NU5rCOTeijt7KsY8+Perbgd610WiPGIylhTZwlH4Hp:NUQOJjhK98Nc81DpI0TSlH4Hp
- TLSH T1D9B4F126B681C133D29202711AE6EBB2693F7C35573694C33B98A23E2F756E1D374346
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_49fc78e2eadc7d18ef0cc24d4e436c47_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_49fc78e2eadc7d18ef0cc24d4e436c47_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260630-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_49fc78e2eadc7d18ef0cc24d4e436c47_elex_mafia_stealc_tofsee
- Size 529KB
- SHA256 d27d8530654554d2f70e27cf51276d01ad05662b344498e10262091834456bc8
- MD5 49fc78e2eadc7d18ef0cc24d4e436c47
- SHA1 48806c945d25b0da66b97659341ab4b23efdbf68
- SHA512 1872678bd61b7c296b08ad31458dbe37998ff7d8ef5364bf7c38c337c510ca6a8e141df4b323488c76da0776c9354776f448507aa05d5d7f4a100a7d59cd7a48
- SSDEEP 12288:NU5rCOTeijt7KsY8+Perbgd610WiPGIylhTZwlH4Hp:NUQOJjhK98Nc81DpI0TSlH4Hp
- TLSH T1D9B4F126B681C133D29202711AE6EBB2693F7C35573694C33B98A23E2F756E1D374346
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.