General
- Target 2026-07-05_f0df0cf87903f8b7599e73c990ddb668_elex_mafia_stealc_tofsee
- Size 529KB
- Sample260705-dw3eqsgy91
- SHA256 1a48e6c558a349ba6585f43c4d8e4bcdbd170420c49591861a8afb347df66df7
- MD5 f0df0cf87903f8b7599e73c990ddb668
- SHA1 aa910e2f5b647a1fe4b2cb8a3be0df2c31da2cb7
- SHA512 b5dde866c5f728ead8cc3bc3533cbe045268e8e001b3d7b86480fa1dc1e21d7f4832d2d24fa61e11529234ce4e2d5784761807c5cf6ba2d911cb0a0c60d0af39
- SSDEEP 12288:NU5rCOTeij0LLLakZNHajOYFq70tkZDtxqYTZwlH4Hp:NUQOJjULLNdyq4etx9TSlH4Hp
- TLSH T1B8B4F126B584C233E6D201710BE6DBF1AA3E7C355726A4C32794627E2BB16E1D379343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-05_f0df0cf87903f8b7599e73c990ddb668_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_f0df0cf87903f8b7599e73c990ddb668_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260629-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_f0df0cf87903f8b7599e73c990ddb668_elex_mafia_stealc_tofsee
- Size 529KB
- SHA256 1a48e6c558a349ba6585f43c4d8e4bcdbd170420c49591861a8afb347df66df7
- MD5 f0df0cf87903f8b7599e73c990ddb668
- SHA1 aa910e2f5b647a1fe4b2cb8a3be0df2c31da2cb7
- SHA512 b5dde866c5f728ead8cc3bc3533cbe045268e8e001b3d7b86480fa1dc1e21d7f4832d2d24fa61e11529234ce4e2d5784761807c5cf6ba2d911cb0a0c60d0af39
- SSDEEP 12288:NU5rCOTeij0LLLakZNHajOYFq70tkZDtxqYTZwlH4Hp:NUQOJjULLNdyq4etx9TSlH4Hp
- TLSH T1B8B4F126B584C233E6D201710BE6DBF1AA3E7C355726A4C32794627E2BB16E1D379343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.