General
- Target 2026-07-02_7130b0bec0ced59d043356ebe0781f38_elex_mafia_stealc_tofsee
- Size 411KB
- Sample260702-y6dvcaes6s
- SHA256 c9864e538e76274847c4741e06ddcf3848cdf9c27cdc8e8f5dc60772d2c4341d
- MD5 7130b0bec0ced59d043356ebe0781f38
- SHA1 0f888a5ecb4c774edc2a25b9663e6158e31d615d
- SHA512 1b7ee227e7290b3113093299cbfc1c6e759dd30d20439813df9ee886f2045da22f3a515a45ce1038d90a0d46bae36a128be5de5a4eee7e8186284fcbdbe1d49f
- SSDEEP 6144:gVdvczEb7GUOpYWhNVynE/mFR+srPIpo0j3+tabtOVJdNQX9q/ESF5gqH:gZLolhNVyEa+D3+taAdNQX9qLF5gqH
- TLSH T12894CF28B6C1C036D19201314AF6D772553A7DB15B62A4CBB7D43B7E1EB03D1AA7A30B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_7130b0bec0ced59d043356ebe0781f38_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_7130b0bec0ced59d043356ebe0781f38_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260629-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_7130b0bec0ced59d043356ebe0781f38_elex_mafia_stealc_tofsee
- Size 411KB
- SHA256 c9864e538e76274847c4741e06ddcf3848cdf9c27cdc8e8f5dc60772d2c4341d
- MD5 7130b0bec0ced59d043356ebe0781f38
- SHA1 0f888a5ecb4c774edc2a25b9663e6158e31d615d
- SHA512 1b7ee227e7290b3113093299cbfc1c6e759dd30d20439813df9ee886f2045da22f3a515a45ce1038d90a0d46bae36a128be5de5a4eee7e8186284fcbdbe1d49f
- SSDEEP 6144:gVdvczEb7GUOpYWhNVynE/mFR+srPIpo0j3+tabtOVJdNQX9q/ESF5gqH:gZLolhNVyEa+D3+taAdNQX9qLF5gqH
- TLSH T12894CF28B6C1C036D19201314AF6D772553A7DB15B62A4CBB7D43B7E1EB03D1AA7A30B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Deletes itself
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.