General
- Target 2026-07-02_7634b8302e5a64ff78858e35cd2cb057_elex_mafia_stealc_tofsee
- Size 652KB
- Sample260702-vw2xmsax2y
- SHA256 cb9f15423cfe5e1ffb710e6c05d432351311931711e8774b668422902a1e276d
- MD5 7634b8302e5a64ff78858e35cd2cb057
- SHA1 f79f714c83f8c6027905d0d853e5faf3eab8f2a2
- SHA512 da3769ae002ba6e21898fe8f67ba9ba0a98feac8a82956a598c70e53082dd6200c7e21f94a7c026397a975390c17c9ba3e58e597835a7a2b79e425d190fff932
- SSDEEP 12288:wU5rCOTeiDXRNxI5V7E3OQWJ3UXZNZ+3/v+I9hUG2VA:wUQOJDXRN3W9mNGEA
- TLSH T102E4D02177D88532E9FB037859B5E6614D7EBD329722D6CF2F8012AE0971BC08A71763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_7634b8302e5a64ff78858e35cd2cb057_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_7634b8302e5a64ff78858e35cd2cb057_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260629-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_7634b8302e5a64ff78858e35cd2cb057_elex_mafia_stealc_tofsee
- Size 652KB
- SHA256 cb9f15423cfe5e1ffb710e6c05d432351311931711e8774b668422902a1e276d
- MD5 7634b8302e5a64ff78858e35cd2cb057
- SHA1 f79f714c83f8c6027905d0d853e5faf3eab8f2a2
- SHA512 da3769ae002ba6e21898fe8f67ba9ba0a98feac8a82956a598c70e53082dd6200c7e21f94a7c026397a975390c17c9ba3e58e597835a7a2b79e425d190fff932
- SSDEEP 12288:wU5rCOTeiDXRNxI5V7E3OQWJ3UXZNZ+3/v+I9hUG2VA:wUQOJDXRN3W9mNGEA
- TLSH T102E4D02177D88532E9FB037859B5E6614D7EBD329722D6CF2F8012AE0971BC08A71763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.