General
- Target 2026-07-02_3d6acb191b3b00ee5ae62a1e29249995_elex_mafia_stealc_tofsee
- Size 386KB
- Sample260702-whbnzagt7l
- SHA256 92b2f5a1a17beee1159faeac03ba98875da8ba26963f948870da685f166ff7f4
- MD5 3d6acb191b3b00ee5ae62a1e29249995
- SHA1 6073c0ad158acf0d9448821d2f9bd3ee252f1f40
- SHA512 8a35f15f32dda0e044cf9097e7fbc1af60cf1462f46543098d8518ac783091a335340c9397521c05b814b952be52273e923adfbd1a1daa9101bf7ae93c12dafb
- SSDEEP 6144:drxfv4co9ZL3GBGgjODxbf7hHuj/+Z4aNBv5Nyv8RZg/Tn2e92+ghuZ0AA6:Zm48gODxbz+A4a7RNQa6T2eBgcZl
- TLSH T10884D0247581C036D19601315BE6EB721A3B3DB25B2568C77BE47B6E9EB03D1AB3430B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_3d6acb191b3b00ee5ae62a1e29249995_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_3d6acb191b3b00ee5ae62a1e29249995_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260629-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_3d6acb191b3b00ee5ae62a1e29249995_elex_mafia_stealc_tofsee
- Size 386KB
- SHA256 92b2f5a1a17beee1159faeac03ba98875da8ba26963f948870da685f166ff7f4
- MD5 3d6acb191b3b00ee5ae62a1e29249995
- SHA1 6073c0ad158acf0d9448821d2f9bd3ee252f1f40
- SHA512 8a35f15f32dda0e044cf9097e7fbc1af60cf1462f46543098d8518ac783091a335340c9397521c05b814b952be52273e923adfbd1a1daa9101bf7ae93c12dafb
- SSDEEP 6144:drxfv4co9ZL3GBGgjODxbf7hHuj/+Z4aNBv5Nyv8RZg/Tn2e92+ghuZ0AA6:Zm48gODxbz+A4a7RNQa6T2eBgcZl
- TLSH T10884D0247581C036D19601315BE6EB721A3B3DB25B2568C77BE47B6E9EB03D1AB3430B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Deletes itself
Executes dropped EXE
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.