2026-07-04_05bca06321272d5e7f934f073c02ec29_elex_mafia_stealc_tofsee

General

Target
2026-07-04_05bca06321272d5e7f934f073c02ec29_elex_mafia_stealc_tofsee
Size 436KB
Sample260704-te1skshx3x
SHA256 bbddc37a2d997cefa0484082078b36fab9118231ff98dc5b50c93c11c75fe935
MD5 05bca06321272d5e7f934f073c02ec29
SHA1 6c4899fa029eaa5ba04a365387350b5dbd952ac7
SHA512 794b1173ba5a2d50b2f1e6db0891461bd39e5dde06bd03c81ee4baf0d20f743db09471b4a2ae780cc2e685a99456c58745507f625cccd48011b43b0a77754cb8
SSDEEP 6144:a9EyS4oaxTkjxcW1Htg88HP7IarTLdzpbdRBDYHsW9HHRh5Zvv6iOMB:aO4GfBtL8HP/3bZDmNL/36RMB
TLSH
T14994D0257182C033EA9215354FEA9779697576A14B12A4CB3BD1CB2D9FD02F2E33930B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-04_05bca06321272d5e7f934f073c02ec29_elex_mafia_stealc_tofsee

File Explorer

2026-07-04_05bca06321272d5e7f934f073c02ec29_elex_mafia_stealc_tofsee

.exe 436KB

2026-07-04_05bca06321272d5e7f934f073c02ec29_elex_mafia_stealc_tofsee

SHA256 bbddc37a2d997cefa0484082078b36fab9118231ff98dc5b50c93c11c75fe935
MD5 05bca06321272d5e7f934f073c02ec29
SHA1 6c4899fa029eaa5ba04a365387350b5dbd952ac7
SHA512 794b1173ba5a2d50b2f1e6db0891461bd39e5dde06bd03c81ee4baf0d20f743db09471b4a2ae780cc2e685a99456c58745507f625cccd48011b43b0a77754cb8
SSDEEP 6144:a9EyS4oaxTkjxcW1Htg88HP7IarTLdzpbdRBDYHsW9HHRh5Zvv6iOMB:aO4GfBtL8HP/3bZDmNL/36RMB
TLSH
T14994D0257182C033EA9215354FEA9779697576A14B12A4CB3BD1CB2D9FD02F2E33930B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

67250

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

133KB

Virtual Size

132KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

24KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

257KB

Virtual Size

278KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.htext

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-04_05bca06321272d5e7f934f073c02ec29_elex_mafia_stealc_tofsee

generic