General
- Target 2026-07-02_75aaa3ffe24859d8bb20ee82515f5924_elex_mafia_stealc_tofsee
- Size 526KB
- Sample260702-y4ry7aes2z
- SHA256 ea9475b817c2d67b36271958d890a7c378fda65641574ced4818942ff6aaf9f7
- MD5 75aaa3ffe24859d8bb20ee82515f5924
- SHA1 31c51297ce1cb4e30b4287858665cfb3480169d2
- SHA512 9add61c5af95ee6afa2b7b568f1cf4f9d1f9d297e0dc66a59cb8bbc1cb59dfb0b8228cea3e572a51a7403e5693fc02ddb363a26f3f2da657de593349e6fc5799
- SSDEEP 6144:zooTAQjKG3wDGAeIc9kphIoDZnYEyaC2kH7Lj+V6HhsWgr1ngwQojLXIcwP6+:z6PCrIc9kph5Lb5k7+VqS1PQojLXIcIz
- TLSH T119B4BF385585D2B2D2A283389CEDF68E4C34F111573970E7A3EC07AD99BDAD09E39607
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_75aaa3ffe24859d8bb20ee82515f5924_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_75aaa3ffe24859d8bb20ee82515f5924_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260629-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_75aaa3ffe24859d8bb20ee82515f5924_elex_mafia_stealc_tofsee
- Size 526KB
- SHA256 ea9475b817c2d67b36271958d890a7c378fda65641574ced4818942ff6aaf9f7
- MD5 75aaa3ffe24859d8bb20ee82515f5924
- SHA1 31c51297ce1cb4e30b4287858665cfb3480169d2
- SHA512 9add61c5af95ee6afa2b7b568f1cf4f9d1f9d297e0dc66a59cb8bbc1cb59dfb0b8228cea3e572a51a7403e5693fc02ddb363a26f3f2da657de593349e6fc5799
- SSDEEP 6144:zooTAQjKG3wDGAeIc9kphIoDZnYEyaC2kH7Lj+V6HhsWgr1ngwQojLXIcwP6+:z6PCrIc9kph5Lb5k7+VqS1PQojLXIcIz
- TLSH T119B4BF385585D2B2D2A283389CEDF68E4C34F111573970E7A3EC07AD99BDAD09E39607
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Deletes itself
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.