General
- Target 2026-07-02_2264aa282c0ddb2e584883c136fcfe00_elex_mafia_stealc_tofsee
- Size 505KB
- Sample260702-qtypzscv6l
- SHA256 35ee29daf11c8c47b8002c70d98992cf248ba596546f669f0f0e563175236460
- MD5 2264aa282c0ddb2e584883c136fcfe00
- SHA1 fde9daa9b1852ecbec1af117c69c6891fde71959
- SHA512 24fc1fdfebee8bb653f50fb8e3e2cfe9ba18bdc66c8c95004f6c4eb285d45ddef5c0963eb80555e9fc15fa2a67de4029b6d3eed0739daa6759b7de324c742e61
- SSDEEP 12288:NU5rCOTeij5Cg4p1n1HdS7wHPeyleTZwlH:NUQOJjv4pRvS7wHPeHTSlH
- TLSH T16EB4F125B681C133E6D202710BDAEBB26A3A7C75572694C73B84627E2F713E1D379306
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_2264aa282c0ddb2e584883c136fcfe00_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_2264aa282c0ddb2e584883c136fcfe00_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260629-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_2264aa282c0ddb2e584883c136fcfe00_elex_mafia_stealc_tofsee
- Size 505KB
- SHA256 35ee29daf11c8c47b8002c70d98992cf248ba596546f669f0f0e563175236460
- MD5 2264aa282c0ddb2e584883c136fcfe00
- SHA1 fde9daa9b1852ecbec1af117c69c6891fde71959
- SHA512 24fc1fdfebee8bb653f50fb8e3e2cfe9ba18bdc66c8c95004f6c4eb285d45ddef5c0963eb80555e9fc15fa2a67de4029b6d3eed0739daa6759b7de324c742e61
- SSDEEP 12288:NU5rCOTeij5Cg4p1n1HdS7wHPeyleTZwlH:NUQOJjv4pRvS7wHPeHTSlH
- TLSH T16EB4F125B681C133E6D202710BDAEBB26A3A7C75572694C73B84627E2F713E1D379306
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.