General
- Target 2026-07-02_10c0c375e59eb432c39e9088f73f475e_elex_mafia_stealc_tofsee
- Size 499KB
- Sample260702-wzbejagy9q
- SHA256 47147a7c7ec097dc466e06dc9b5c89fe9a7305ef84acaf55bb508bba3c7e13c7
- MD5 10c0c375e59eb432c39e9088f73f475e
- SHA1 86c4ee5a47b0e1f8f5adec677275fed088dd7887
- SHA512 959e0d0929c05b1d2c5fad709b78b776808cc364c0fb2af1ddbab8c9fc8a163bd4a32e305b81e11f24351c137e9ddb21ea3bb03bc679df9c8a6719a755818143
- SSDEEP 12288:sO4rfItL8HPtO2SQ1GGuL8gbRNm/R7dmsIhiqlj:sO4rQtGPcqjuwANGAsIhiqlj
- TLSH T141B4F12A73418233D29302711BD6DBA6BB3E75751726A4C73BD4013E1F66AE1D33A346
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_10c0c375e59eb432c39e9088f73f475e_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_10c0c375e59eb432c39e9088f73f475e_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260629-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_10c0c375e59eb432c39e9088f73f475e_elex_mafia_stealc_tofsee
- Size 499KB
- SHA256 47147a7c7ec097dc466e06dc9b5c89fe9a7305ef84acaf55bb508bba3c7e13c7
- MD5 10c0c375e59eb432c39e9088f73f475e
- SHA1 86c4ee5a47b0e1f8f5adec677275fed088dd7887
- SHA512 959e0d0929c05b1d2c5fad709b78b776808cc364c0fb2af1ddbab8c9fc8a163bd4a32e305b81e11f24351c137e9ddb21ea3bb03bc679df9c8a6719a755818143
- SSDEEP 12288:sO4rfItL8HPtO2SQ1GGuL8gbRNm/R7dmsIhiqlj:sO4rQtGPcqjuwANGAsIhiqlj
- TLSH T141B4F12A73418233D29302711BD6DBA6BB3E75751726A4C73BD4013E1F66AE1D33A346
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Deletes itself
Executes dropped EXE
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.