General
- Target 2026-07-04_76ef2a2cb4599c48cc618ef38fc1774e_elex_mafia_stealc_tofsee
- Size 441KB
- Sample260704-w4mncsfx6p
- SHA256 0b649d278c23842681c35aa08a5f4c765f04685c494dbc708f639db6b68d25ae
- MD5 76ef2a2cb4599c48cc618ef38fc1774e
- SHA1 502b05e7ad8072b0617f7bd609a6288a1a298303
- SHA512 f5a3b6385a38d72fde8d5c88f04f5d690356e170289c60bd53db0b4195cacecd4032ab246dfcc8f2a522be40db7b27157ef4fa1380155a5dec6f416e0c90cd64
- SSDEEP 12288:6i4ET7+0pAiv+XejwQheJEL52lUtnovSGsdUqmmGU5c:6i4ETK0pD+ujwQheJELQlUmSG83vGU+
- TLSH T1F0A4D0207245C032D3A716350BF4CB7466AF75618751A8CB3BF4CB6E6EA8AD1DA3434E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-04_76ef2a2cb4599c48cc618ef38fc1774e_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-04_76ef2a2cb4599c48cc618ef38fc1774e_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-04_76ef2a2cb4599c48cc618ef38fc1774e_elex_mafia_stealc_tofsee
- Size 441KB
- SHA256 0b649d278c23842681c35aa08a5f4c765f04685c494dbc708f639db6b68d25ae
- MD5 76ef2a2cb4599c48cc618ef38fc1774e
- SHA1 502b05e7ad8072b0617f7bd609a6288a1a298303
- SHA512 f5a3b6385a38d72fde8d5c88f04f5d690356e170289c60bd53db0b4195cacecd4032ab246dfcc8f2a522be40db7b27157ef4fa1380155a5dec6f416e0c90cd64
- SSDEEP 12288:6i4ET7+0pAiv+XejwQheJEL52lUtnovSGsdUqmmGU5c:6i4ETK0pD+ujwQheJELQlUmSG83vGU+
- TLSH T1F0A4D0207245C032D3A716350BF4CB7466AF75618751A8CB3BF4CB6E6EA8AD1DA3434E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Deletes itself
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.