General
- Target 2026-07-02_4169642a504c53c4e029d951398ad2eb_elex_mafia_stealc_tofsee
- Size 414KB
- Sample260702-wfsvgabs2y
- SHA256 38993d1b22032de339a6c220e4d569ca7973d21ccd41be7d02788c98e655be67
- MD5 4169642a504c53c4e029d951398ad2eb
- SHA1 1a79d56b36bdb95fe935e821d1a8218a3c3d4a29
- SHA512 00176be204afbad1614e7f4e00594f82404db823d5bdca4034edcbd119e3d6c4f8b8dcf9bdf88ad7bb294ef9c0c27a6186ffcd5548a6fe8931a993ed08f15b48
- SSDEEP 12288:Wq4w/ekieZgU6ZGPWk6+d/pzOQVwS3bglx:Wq4w/ekieH6kekLBj93Er
- TLSH T14B94E0203586C037E1A716348BE5CB6A693E7DA44B32A4C73BD42BAE5E746D2D734307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_4169642a504c53c4e029d951398ad2eb_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_4169642a504c53c4e029d951398ad2eb_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260629-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_4169642a504c53c4e029d951398ad2eb_elex_mafia_stealc_tofsee
- Size 414KB
- SHA256 38993d1b22032de339a6c220e4d569ca7973d21ccd41be7d02788c98e655be67
- MD5 4169642a504c53c4e029d951398ad2eb
- SHA1 1a79d56b36bdb95fe935e821d1a8218a3c3d4a29
- SHA512 00176be204afbad1614e7f4e00594f82404db823d5bdca4034edcbd119e3d6c4f8b8dcf9bdf88ad7bb294ef9c0c27a6186ffcd5548a6fe8931a993ed08f15b48
- SSDEEP 12288:Wq4w/ekieZgU6ZGPWk6+d/pzOQVwS3bglx:Wq4w/ekieH6kekLBj93Er
- TLSH T14B94E0203586C037E1A716348BE5CB6A693E7DA44B32A4C73BD42BAE5E746D2D734307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Deletes itself
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.