General
- Target 2026-07-05_db33e151cbad633736938cbda72ac7f8_elex_mafia_stealc_tofsee
- Size 652KB
- Sample260705-bgbmcsfy3z
- SHA256 6ef188424d0917ee07293c6392ffba49930b8fd21b3536b925ebd70b6e70d3ea
- MD5 db33e151cbad633736938cbda72ac7f8
- SHA1 58f2234423e6bdd56b2d44f194e55318bc028b88
- SHA512 4785447b79efd021de9f71438e01c409279458b8f7a4d18276fda750cb1b818c6a85f88817b54f765600d6e6ade04bc38ecd1a1d00a03a0a50e1cd7639be7e7e
- SSDEEP 12288:wU5rCOTeiDQ0OYSab8kmL3Mo4BRME81h1fjQdNZ+3/v+I9hUG2VA:wUQOJDQ0OMDYE/8r1fjoNGEA
- TLSH T1BAE4D02173D88632E5FB037859B5E6614D7EFD22A722D6DF5F8051AE09B1BC08A31723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-05_db33e151cbad633736938cbda72ac7f8_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_db33e151cbad633736938cbda72ac7f8_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260629-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_db33e151cbad633736938cbda72ac7f8_elex_mafia_stealc_tofsee
- Size 652KB
- SHA256 6ef188424d0917ee07293c6392ffba49930b8fd21b3536b925ebd70b6e70d3ea
- MD5 db33e151cbad633736938cbda72ac7f8
- SHA1 58f2234423e6bdd56b2d44f194e55318bc028b88
- SHA512 4785447b79efd021de9f71438e01c409279458b8f7a4d18276fda750cb1b818c6a85f88817b54f765600d6e6ade04bc38ecd1a1d00a03a0a50e1cd7639be7e7e
- SSDEEP 12288:wU5rCOTeiDQ0OYSab8kmL3Mo4BRME81h1fjQdNZ+3/v+I9hUG2VA:wUQOJDQ0OMDYE/8r1fjoNGEA
- TLSH T1BAE4D02173D88632E5FB037859B5E6614D7EFD22A722D6DF5F8051AE09B1BC08A31723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.