General
- Target 2026-07-04_ecaca20a6c8dc6bc05c0fa70275c4b4a_elex_mafia_stealc_tofsee
- Size 487KB
- Sample260704-ve5bfaas2t
- SHA256 4278207d7a5da32c684bc4203e5611995676a15bc0cc866ffe3d9f3d9af6c722
- MD5 ecaca20a6c8dc6bc05c0fa70275c4b4a
- SHA1 06a424a90a7164de4be32c911e7eff2b7c44d73a
- SHA512 11e97c920a52f5e89531dd9e4e4dd32421930fa1e0d12d67539d54a0387b17b6598f52554e21dbb93ef0c4ac0b02d4f5235e7ed76fb934d64069091ef71711c7
- SSDEEP 6144:qorf3lPvovsgZnqG2C7mOTeiL9DUYYkRn1J2gyEjRyDbkaK3puSLax8rAhlo6eRy:HU5rCOTeiJfpgZlK3dFrcl+3WRiwNZ
- TLSH T1ACB4F134B585C032E9D212704AD6EBA2297A7C725B2664C77BC0637E6FB42D1E7B4307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-04_ecaca20a6c8dc6bc05c0fa70275c4b4a_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-04_ecaca20a6c8dc6bc05c0fa70275c4b4a_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260629-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-04_ecaca20a6c8dc6bc05c0fa70275c4b4a_elex_mafia_stealc_tofsee
- Size 487KB
- SHA256 4278207d7a5da32c684bc4203e5611995676a15bc0cc866ffe3d9f3d9af6c722
- MD5 ecaca20a6c8dc6bc05c0fa70275c4b4a
- SHA1 06a424a90a7164de4be32c911e7eff2b7c44d73a
- SHA512 11e97c920a52f5e89531dd9e4e4dd32421930fa1e0d12d67539d54a0387b17b6598f52554e21dbb93ef0c4ac0b02d4f5235e7ed76fb934d64069091ef71711c7
- SSDEEP 6144:qorf3lPvovsgZnqG2C7mOTeiL9DUYYkRn1J2gyEjRyDbkaK3puSLax8rAhlo6eRy:HU5rCOTeiJfpgZlK3dFrcl+3WRiwNZ
- TLSH T1ACB4F134B585C032E9D212704AD6EBA2297A7C725B2664C77BC0637E6FB42D1E7B4307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.