2026-07-04_cda3fa0afa20769d102ce91e505e652d_elex_mafia_stealc_tofsee

General

Target
2026-07-04_cda3fa0afa20769d102ce91e505e652d_elex_mafia_stealc_tofsee
Size 448KB
Sample260704-rz9j4sgv21
SHA256 85ece54da9cfaa77d687e7a54117d8e87a8b36697bb791f777582424cf0dab04
MD5 cda3fa0afa20769d102ce91e505e652d
SHA1 9fa62fbc536bf9755630484d9ffa8bd093223882
SHA512 0ef30d85646b9452eac9e460cf0ff57e77cc8cb44cf2290dae4ec6b5ffeca1272547e19961e91affae4454306ed36ea3d7644a1b0fbc9cc341230b617ab66b5e
SSDEEP 6144:3FrJxvldL4c5ONK1tgRbd1s79+i5+MCYlGRSOoyW3+M2DIBv6KSzSrTlL63nzldb:lb4bBxdi79LL9A0xIIgzkZL6jWANbydY
TLSH
T14DA4E0243181C037D2A325394AE5C77694BA39A14B21A8D73BD4EB7F5EB02F5EA35307
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-04_cda3fa0afa20769d102ce91e505e652d_elex_mafia_stealc_tofsee

File Explorer

2026-07-04_cda3fa0afa20769d102ce91e505e652d_elex_mafia_stealc_tofsee

.exe 448KB

2026-07-04_cda3fa0afa20769d102ce91e505e652d_elex_mafia_stealc_tofsee

SHA256 85ece54da9cfaa77d687e7a54117d8e87a8b36697bb791f777582424cf0dab04
MD5 cda3fa0afa20769d102ce91e505e652d
SHA1 9fa62fbc536bf9755630484d9ffa8bd093223882
SHA512 0ef30d85646b9452eac9e460cf0ff57e77cc8cb44cf2290dae4ec6b5ffeca1272547e19961e91affae4454306ed36ea3d7644a1b0fbc9cc341230b617ab66b5e
SSDEEP 6144:3FrJxvldL4c5ONK1tgRbd1s79+i5+MCYlGRSOoyW3+M2DIBv6KSzSrTlL63nzldb:lb4bBxdi79LL9A0xIIgzkZL6jWANbydY
TLSH
T14DA4E0243181C037D2A325394AE5C77694BA39A14B21A8D73BD4EB7F5EB02F5EA35307
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

67335

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

133KB

Virtual Size

133KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

24KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

260KB

Virtual Size

282KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

13KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

11KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.htext

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-04_cda3fa0afa20769d102ce91e505e652d_elex_mafia_stealc_tofsee

generic