General
- Target 2026-07-04_627d7aee83ac15ba56dc2b682e9dc911_elex_mafia_stealc_tofsee
- Size 441KB
- Sample260704-srcqvacy9p
- SHA256 1f10c714cce8c373c4dee97ec7818ceca287d14e4359385c3a829bf4e88ff092
- MD5 627d7aee83ac15ba56dc2b682e9dc911
- SHA1 0f755ab62cd03add4374315566549e6949cadada
- SHA512 df8bdf7526bc4d68bd2f5df41dc5e76d97ab2b936fc20910099697b5812bcb8c1ed0eb39811fa0128ac363c9e0472247c355682bdf8bd82ef40d505f8a815692
- SSDEEP 6144:6ajdz4s4mDHq9OXpOd0p6Jiv+vtv52f0R+HhloYD/grPvpkE4PeX5dcgRf5QspEr:6i4ET7+0pAiv+I0qh1/grPQPc5uVkc
- TLSH T18BA4D0207141C032D3A706350BF4CBB966AF7561475198CB3BF4DA6FAE68AC2DA7434E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-04_627d7aee83ac15ba56dc2b682e9dc911_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-04_627d7aee83ac15ba56dc2b682e9dc911_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260629-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-04_627d7aee83ac15ba56dc2b682e9dc911_elex_mafia_stealc_tofsee
- Size 441KB
- SHA256 1f10c714cce8c373c4dee97ec7818ceca287d14e4359385c3a829bf4e88ff092
- MD5 627d7aee83ac15ba56dc2b682e9dc911
- SHA1 0f755ab62cd03add4374315566549e6949cadada
- SHA512 df8bdf7526bc4d68bd2f5df41dc5e76d97ab2b936fc20910099697b5812bcb8c1ed0eb39811fa0128ac363c9e0472247c355682bdf8bd82ef40d505f8a815692
- SSDEEP 6144:6ajdz4s4mDHq9OXpOd0p6Jiv+vtv52f0R+HhloYD/grPvpkE4PeX5dcgRf5QspEr:6i4ET7+0pAiv+I0qh1/grPQPc5uVkc
- TLSH T18BA4D0207141C032D3A706350BF4CBB966AF7561475198CB3BF4DA6FAE68AC2DA7434E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Deletes itself
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.