General
- Target 2026-07-04_d45f60947eaa1e2865e7d87a5e8bea0c_elex_mafia_stealc_tofsee
- Size 433KB
- Sample260704-vtflmaav8x
- SHA256 3a58f2a0100d24da9484d5b01cc26a25518126c420f8edcbcfb853d1a382e1ca
- MD5 d45f60947eaa1e2865e7d87a5e8bea0c
- SHA1 b65c54f74aeaf4c8644bba177248a184d74c7183
- SHA512 cce48c6bb3a694c64fefe085111213ff654e9fe6c377d40dd5038386323a1098c2245058a6a816dbc08ea1a3d4dfbef406f1ddf662f23193921398ab34aacb82
- SSDEEP 12288:Ci4g+yU+0pAiv++88199OoOFuHjg3l1poos7WI2sZ:Ci4gXn0pD++881aUHQLpHrJ
- TLSH T11594E1203542C033D6A715348BE5CB65267E79A25B1668CB7BD01BBE2E703D1EB3534B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-04_d45f60947eaa1e2865e7d87a5e8bea0c_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-04_d45f60947eaa1e2865e7d87a5e8bea0c_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260629-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-04_d45f60947eaa1e2865e7d87a5e8bea0c_elex_mafia_stealc_tofsee
- Size 433KB
- SHA256 3a58f2a0100d24da9484d5b01cc26a25518126c420f8edcbcfb853d1a382e1ca
- MD5 d45f60947eaa1e2865e7d87a5e8bea0c
- SHA1 b65c54f74aeaf4c8644bba177248a184d74c7183
- SHA512 cce48c6bb3a694c64fefe085111213ff654e9fe6c377d40dd5038386323a1098c2245058a6a816dbc08ea1a3d4dfbef406f1ddf662f23193921398ab34aacb82
- SSDEEP 12288:Ci4g+yU+0pAiv++88199OoOFuHjg3l1poos7WI2sZ:Ci4gXn0pD++881aUHQLpHrJ
- TLSH T11594E1203542C033D6A715348BE5CB65267E79A25B1668CB7BD01BBE2E703D1EB3534B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Deletes itself
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.