General
- Target 2026-07-02_295cacd3c0bdc1673b16f0889b30397f_elex_mafia_stealc_tofsee
- Size 435KB
- Sample260702-wp8x2sbv6s
- SHA256 50bfbef4ea97085cd8c6a105b7d5c862f37422033424a0810c6a371568c66090
- MD5 295cacd3c0bdc1673b16f0889b30397f
- SHA1 fd0993802c81ededd4b5560b70a4a079464da194
- SHA512 625c8877c9dcdd68ab9b5e4db14b4139aebfce64399901d3a6a6d52cf649c32bc87a92129cf89572843bff7c52f2462b6bebf15f30b5a0e5f9ffb8e8e068fc0a
- SSDEEP 12288:sm48gODxbNBFQRLzeJXharl2LkiNZsXB:smCOdNBFkBrEYiNGXB
- TLSH T1ED94D02572808133D19301324AEAE7A26A3F3CB2477558C73BE8766D5BB17D1A73534B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_295cacd3c0bdc1673b16f0889b30397f_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_295cacd3c0bdc1673b16f0889b30397f_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260629-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_295cacd3c0bdc1673b16f0889b30397f_elex_mafia_stealc_tofsee
- Size 435KB
- SHA256 50bfbef4ea97085cd8c6a105b7d5c862f37422033424a0810c6a371568c66090
- MD5 295cacd3c0bdc1673b16f0889b30397f
- SHA1 fd0993802c81ededd4b5560b70a4a079464da194
- SHA512 625c8877c9dcdd68ab9b5e4db14b4139aebfce64399901d3a6a6d52cf649c32bc87a92129cf89572843bff7c52f2462b6bebf15f30b5a0e5f9ffb8e8e068fc0a
- SSDEEP 12288:sm48gODxbNBFQRLzeJXharl2LkiNZsXB:smCOdNBFkBrEYiNGXB
- TLSH T1ED94D02572808133D19301324AEAE7A26A3F3CB2477558C73BE8766D5BB17D1A73534B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Deletes itself
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.