2026-07-03_f0567f0d4e8ddfdfc44fcfad58830ee6_elex_mafia_stealc_tofsee

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-03_f0567f0d4e8ddfdfc44fcfad58830ee6_elex_mafia_stealc_tofsee
Size 505KB
Sample260703-cwbrcaas4w
SHA256 719cb2a0e32c844ec678ff5eb209e8318ab6557c3ab9de8aa8aeae8d3599d10f
MD5 f0567f0d4e8ddfdfc44fcfad58830ee6
SHA1 1cca09a0fbbe0b1e2ff39c4b39e54f119a46a561
SHA512 7f43aa991b3bc8aeb855a23e911f62bf351fc032613a07559ab67649905900634b11c11dcf468dffb8c9098df3876262cdda54d0d06a3200617eb5eb5498c4d9
SSDEEP 12288:NU5rCOTeij7aedhbUfAfcO5xEzg2PnT3dTZwlH:NUQOJjOwhb/xEPPnhTSlH
TLSH
T10AB4F121B644C132E59302311BE6EBB1693F7D72972654D33BC4666E2FB12E1E3B5306
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-03_f0567f0d4e8ddfdfc44fcfad58830ee6_elex_mafia_stealc_tofsee

File Explorer

2026-07-03_f0567f0d4e8ddfdfc44fcfad58830ee6_elex_mafia_stealc_tofsee

.exe 505KB

2026-07-03_f0567f0d4e8ddfdfc44fcfad58830ee6_elex_mafia_stealc_tofsee

SHA256 719cb2a0e32c844ec678ff5eb209e8318ab6557c3ab9de8aa8aeae8d3599d10f
MD5 f0567f0d4e8ddfdfc44fcfad58830ee6
SHA1 1cca09a0fbbe0b1e2ff39c4b39e54f119a46a561
SHA512 7f43aa991b3bc8aeb855a23e911f62bf351fc032613a07559ab67649905900634b11c11dcf468dffb8c9098df3876262cdda54d0d06a3200617eb5eb5498c4d9
SSDEEP 12288:NU5rCOTeij7aedhbUfAfcO5xEzg2PnT3dTZwlH:NUQOJjOwhb/xEPPnhTSlH
TLSH
T10AB4F121B644C132E59302311BE6EBB1693F7D72972654D33BC4666E2FB12E1E3B5306
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

70582

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

137KB

Virtual Size

136KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

24KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

262KB

Virtual Size

283KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

50KB

Virtual Size

50KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

11KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.text

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

9KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.text

Size

1KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-03_f0567f0d4e8ddfdfc44fcfad58830ee6_elex_mafia_stealc_tofsee

generic