General
- Target 2026-07-03_99e821062d929bd89ff24924759a43fe_elex_mafia_stealc_tofsee
- Size 546KB
- Sample260703-s8r7vsg14p
- SHA256 2c84db6831acdc360aeefbee319b5dcb3baba8d7ca76983711c4f8cefc3c5e20
- MD5 99e821062d929bd89ff24924759a43fe
- SHA1 09b3e172b0c8d4bfb3ff6315419118722a99e409
- SHA512 da45ec0ea7afc54c466caeccff0e7843a833bd3dd4ce051e369d38b6c7550a7cd0ef8761c7066d3988a9119d50f5bf09f2d615b4d6bd8b0107824ae27dd96cc6
- SSDEEP 12288:9U5rCOTei639kRwZlsuoZkEFSRA1LvDXF4hXqZoXWjdq:9UQOJ6aOhYzTtp4FqqGh
- TLSH T1A3C4F125B584C032F5E201314AE6EBB1297A7D355B26A4C77BC0AB6E6FB52E1D334343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-03_99e821062d929bd89ff24924759a43fe_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-03_99e821062d929bd89ff24924759a43fe_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260630-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_99e821062d929bd89ff24924759a43fe_elex_mafia_stealc_tofsee
- Size 546KB
- SHA256 2c84db6831acdc360aeefbee319b5dcb3baba8d7ca76983711c4f8cefc3c5e20
- MD5 99e821062d929bd89ff24924759a43fe
- SHA1 09b3e172b0c8d4bfb3ff6315419118722a99e409
- SHA512 da45ec0ea7afc54c466caeccff0e7843a833bd3dd4ce051e369d38b6c7550a7cd0ef8761c7066d3988a9119d50f5bf09f2d615b4d6bd8b0107824ae27dd96cc6
- SSDEEP 12288:9U5rCOTei639kRwZlsuoZkEFSRA1LvDXF4hXqZoXWjdq:9UQOJ6aOhYzTtp4FqqGh
- TLSH T1A3C4F125B584C032F5E201314AE6EBB1297A7D355B26A4C77BC0AB6E6FB52E1D334343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.