General
- Target 2026-07-03_0f54e8cb23ee99557cc4fc8cca2ba45a_elex_mafia_stealc_tofsee
- Size 486KB
- Sample260704-aay9eahv3y
- SHA256 7a7ea52ca011fcd120788af04f2a77655194b1a3833919b4bbac19df6713b0a4
- MD5 0f54e8cb23ee99557cc4fc8cca2ba45a
- SHA1 0753e3f1349b8bbc71dee8255577bb6549a4cbe6
- SHA512 0e6d69b0ca20e6f0d155eeb67fd3a21704eb703c2781347dab583b0f590f7210dec5633a6c9ff2463b4c93fb82a124178d51fff941fe129c098e32db97008c9a
- SSDEEP 12288:3O4rfItL8HPwyFlvn7KBf91Xcwh9jnDHsWsZBNv7rKxUYXhW:3O4rQtGPwyFlv72rrm/3KxUYXhW
- TLSH T1EDB4F1297241C233D28302751BEBDBD6A63E74B15736A4C33B94426D1FA16E1E37A34B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-03_0f54e8cb23ee99557cc4fc8cca2ba45a_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-03_0f54e8cb23ee99557cc4fc8cca2ba45a_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260629-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_0f54e8cb23ee99557cc4fc8cca2ba45a_elex_mafia_stealc_tofsee
- Size 486KB
- SHA256 7a7ea52ca011fcd120788af04f2a77655194b1a3833919b4bbac19df6713b0a4
- MD5 0f54e8cb23ee99557cc4fc8cca2ba45a
- SHA1 0753e3f1349b8bbc71dee8255577bb6549a4cbe6
- SHA512 0e6d69b0ca20e6f0d155eeb67fd3a21704eb703c2781347dab583b0f590f7210dec5633a6c9ff2463b4c93fb82a124178d51fff941fe129c098e32db97008c9a
- SSDEEP 12288:3O4rfItL8HPwyFlvn7KBf91Xcwh9jnDHsWsZBNv7rKxUYXhW:3O4rQtGPwyFlv72rrm/3KxUYXhW
- TLSH T1EDB4F1297241C233D28302751BEBDBD6A63E74B15736A4C33B94426D1FA16E1E37A34B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Deletes itself
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.