General
- Target 2026-07-02_45b6232300512b13b0105ccbb26673de_elex_mafia_stealc_tofsee
- Size 505KB
- Sample260702-wd91zaa19w
- SHA256 31371999ccc1acc25170b32bb428b122247433e6d9a2d3bbebbd0ebf045929c8
- MD5 45b6232300512b13b0105ccbb26673de
- SHA1 50e3315d974e03b28b3509f1b630dfae68812c95
- SHA512 9ff2603864f832104e8395b001cb2f3a130f9e0da9d7f911fe54ddf3381025ca2d180bf86326d4213eb15bd7f72b05054f967253151d84b5f362921bd5a136c4
- SSDEEP 12288:NU5rCOTeijbhAgQJTW3LxH9fZcqQM2+LLTZwlH:NUQOJjbhA9JT0fZs2TSlH
- TLSH T1ECB4F121B689C133E6D212320BE6EBA1693F7C35172654C32B94626E6FB13E1E375347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_45b6232300512b13b0105ccbb26673de_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_45b6232300512b13b0105ccbb26673de_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260629-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_45b6232300512b13b0105ccbb26673de_elex_mafia_stealc_tofsee
- Size 505KB
- SHA256 31371999ccc1acc25170b32bb428b122247433e6d9a2d3bbebbd0ebf045929c8
- MD5 45b6232300512b13b0105ccbb26673de
- SHA1 50e3315d974e03b28b3509f1b630dfae68812c95
- SHA512 9ff2603864f832104e8395b001cb2f3a130f9e0da9d7f911fe54ddf3381025ca2d180bf86326d4213eb15bd7f72b05054f967253151d84b5f362921bd5a136c4
- SSDEEP 12288:NU5rCOTeijbhAgQJTW3LxH9fZcqQM2+LLTZwlH:NUQOJjbhA9JT0fZs2TSlH
- TLSH T1ECB4F121B689C133E6D212320BE6EBA1693F7C35172654C32B94626E6FB13E1E375347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.