General
- Target 2026-07-04_47c7c386270d27f7b8b73a344732e09a_elex_mafia_stealc_tofsee
- Size 487KB
- Sample260704-xpsfqsct4x
- SHA256 860db37f5be11ca57b7e7c91ff15a6751e32e56cb0ccaae2e9925a3d7f45d36e
- MD5 47c7c386270d27f7b8b73a344732e09a
- SHA1 1038b6cf71b7e3b4117198e94844dc09f5c007f6
- SHA512 ab04764d728fa8d32e726338deb494999e4ab38f9a0bba3959005207ac95bb0d2dbe101b373f196f9bdf5adc0b22339bd4cfa4d8ef1a8c3770d774eef8cfbc11
- SSDEEP 12288:HU5rCOTeiJUeXNkXPgNSYxgU+EzkcrNWj0Sw65rNZ:HUQOJJvXNlxgwwgcrN
- TLSH T15AB4F122B585C033E6A202314FE1DBA1193BBC355B26A4C77B94B76E6FB52D1E274307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-04_47c7c386270d27f7b8b73a344732e09a_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-04_47c7c386270d27f7b8b73a344732e09a_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260629-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-04_47c7c386270d27f7b8b73a344732e09a_elex_mafia_stealc_tofsee
- Size 487KB
- SHA256 860db37f5be11ca57b7e7c91ff15a6751e32e56cb0ccaae2e9925a3d7f45d36e
- MD5 47c7c386270d27f7b8b73a344732e09a
- SHA1 1038b6cf71b7e3b4117198e94844dc09f5c007f6
- SHA512 ab04764d728fa8d32e726338deb494999e4ab38f9a0bba3959005207ac95bb0d2dbe101b373f196f9bdf5adc0b22339bd4cfa4d8ef1a8c3770d774eef8cfbc11
- SSDEEP 12288:HU5rCOTeiJUeXNkXPgNSYxgU+EzkcrNWj0Sw65rNZ:HUQOJJvXNlxgwwgcrN
- TLSH T15AB4F122B585C033E6A202314FE1DBA1193BBC355B26A4C77B94B76E6FB52D1E274307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.