General
- Target 2026-07-03_6a221b85c3a50a00289adc11000076ec_elex_mafia_poet-rat_stealc_tofsee
- Size 1.8MB
- Sample260703-rhkvesfx8r
- SHA256 1a4f64c4a08eb749b7d36aedb286fad44fbd5c713ba51f632887b61fe81b4155
- MD5 6a221b85c3a50a00289adc11000076ec
- SHA1 e49c022143ca49a09423df8d6c984bf6c686f0d0
- SHA512 9a7c6ff93670740db896d2516968e40d97e6047107c3ec0b39ac10a99ac15f38ff73981d451a890be73024071548058da49912c1a4f582765c4daef3b809ea4e
- SSDEEP 24576:wUQOJDRSN8RgINGEAFC5etW0Ri+aMyFH1KN:w/OJDEMNGEADt7i+/yTW
- TLSH T13A95816277FD0608F2F75E752AB6F9504C7ABCA25D21D29D1078908E8D71B80DA63B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-03_6a221b85c3a50a00289adc11000076ec_elex_mafia_poet-rat_stealc_tofsee.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-03_6a221b85c3a50a00289adc11000076ec_elex_mafia_poet-rat_stealc_tofsee.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_6a221b85c3a50a00289adc11000076ec_elex_mafia_poet-rat_stealc_tofsee
- Size 1.8MB
- SHA256 1a4f64c4a08eb749b7d36aedb286fad44fbd5c713ba51f632887b61fe81b4155
- MD5 6a221b85c3a50a00289adc11000076ec
- SHA1 e49c022143ca49a09423df8d6c984bf6c686f0d0
- SHA512 9a7c6ff93670740db896d2516968e40d97e6047107c3ec0b39ac10a99ac15f38ff73981d451a890be73024071548058da49912c1a4f582765c4daef3b809ea4e
- SSDEEP 24576:wUQOJDRSN8RgINGEAFC5etW0Ri+aMyFH1KN:w/OJDEMNGEADt7i+/yTW
- TLSH T13A95816277FD0608F2F75E752AB6F9504C7ABCA25D21D29D1078908E8D71B80DA63B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.