General
- Target 2026-07-05_34efa8a5307b3ac59da3ecbc79dd4c32_elex_mafia_stealc_tofsee
- Size 546KB
- Sample260705-fy6w2sh13s
- SHA256 0076fed32486bfe59bc3426f6625bb8005e1835261ba6ba9d5a015da5b386e5a
- MD5 34efa8a5307b3ac59da3ecbc79dd4c32
- SHA1 3b0d7cb6e96f64e37adf7a758890e0ce7d799582
- SHA512 79f9a740e3a327fa097e53f7d33d3504ac4c4ca0fd8d68ecd96aeb52b965f5a551539cf7308e451c2c3b5bc25c73c4e77c7274b7b60c291ef8c4c600b6b069aa
- SSDEEP 12288:9U5rCOTei6X11kGiGHdCk9D85pBI1jW1j8xLCqZoXWjdq:9UQOJ6X11kGiGpJupBI5WZ85CqqGh
- TLSH T14EC4F121B588C032E8D202315FE5EBB1686ABC355B2664C77B80B76E5FB52E1E374317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-05_34efa8a5307b3ac59da3ecbc79dd4c32_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_34efa8a5307b3ac59da3ecbc79dd4c32_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260629-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_34efa8a5307b3ac59da3ecbc79dd4c32_elex_mafia_stealc_tofsee
- Size 546KB
- SHA256 0076fed32486bfe59bc3426f6625bb8005e1835261ba6ba9d5a015da5b386e5a
- MD5 34efa8a5307b3ac59da3ecbc79dd4c32
- SHA1 3b0d7cb6e96f64e37adf7a758890e0ce7d799582
- SHA512 79f9a740e3a327fa097e53f7d33d3504ac4c4ca0fd8d68ecd96aeb52b965f5a551539cf7308e451c2c3b5bc25c73c4e77c7274b7b60c291ef8c4c600b6b069aa
- SSDEEP 12288:9U5rCOTei6X11kGiGHdCk9D85pBI1jW1j8xLCqZoXWjdq:9UQOJ6X11kGiGpJupBI5WZ85CqqGh
- TLSH T14EC4F121B588C032E8D202315FE5EBB1686ABC355B2664C77B80B76E5FB52E1E374317
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.