General
- Target 2026-07-02_b48b72fa6d279d3c16cf534385d76f82_elex_mafia_stealc_tofsee
- Size 486KB
- Sample260702-t951sae17q
- SHA256 aff9fa6952353e0b32cd66b902d00a743cb640bb36dea49eae8b86ae0385e0f4
- MD5 b48b72fa6d279d3c16cf534385d76f82
- SHA1 7f6730588be59adc75c3963231fdcfa1503b99d0
- SHA512 b5f642087d30830ef56288e90775336da41028fe04039471507240acdcb0f9a990932475cf9afd765ab078259943232e06be8ce9cc346de5df99b3b3e8f1e902
- SSDEEP 12288:3O4rfItL8HPF3T/BLJjzcpenuw0XseeXXY7rKxUYXhW:3O4rQtGP1DOew6Y3KxUYXhW
- TLSH T14EB4F12AB6418233D29302305BD6DBD6AA3E74B51725E4C337D8427D1F61BE1E37A34A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_b48b72fa6d279d3c16cf534385d76f82_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_b48b72fa6d279d3c16cf534385d76f82_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260629-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_b48b72fa6d279d3c16cf534385d76f82_elex_mafia_stealc_tofsee
- Size 486KB
- SHA256 aff9fa6952353e0b32cd66b902d00a743cb640bb36dea49eae8b86ae0385e0f4
- MD5 b48b72fa6d279d3c16cf534385d76f82
- SHA1 7f6730588be59adc75c3963231fdcfa1503b99d0
- SHA512 b5f642087d30830ef56288e90775336da41028fe04039471507240acdcb0f9a990932475cf9afd765ab078259943232e06be8ce9cc346de5df99b3b3e8f1e902
- SSDEEP 12288:3O4rfItL8HPF3T/BLJjzcpenuw0XseeXXY7rKxUYXhW:3O4rQtGP1DOew6Y3KxUYXhW
- TLSH T14EB4F12AB6418233D29302305BD6DBD6AA3E74B51725E4C337D8427D1F61BE1E37A34A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Deletes itself
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.