General
- Target 2026-07-05_f6dfbb35f20044825228705b017d504a_elex_mafia_stealc_tofsee
- Size 468KB
- Sample260705-l19nlsbw2w
- SHA256 6c29376c1b6d8a93d829e869146e2ba881f8d61bccac345b21208bd954e7e405
- MD5 f6dfbb35f20044825228705b017d504a
- SHA1 85978aeeba3909fd20159936df9452d0487941be
- SHA512 25799fdfbe500120248f6ba425deeb5baab1ecbfc7f7e137aeed7be895278077613de44418c858d2c314d5eacc9c33255cacba087a574af5615bf2a6c14bda1b
- SSDEEP 12288:qO4rfItL8HGGdwDr2vZkk74pTYbRH2nLwnc87bWmeEVGL:qO4rQtGGOtR0WdELwzumeEVGL
- TLSH T176A4F12A7641C133D24302750FE6DBAAB63E79B40726A4C37BE8427D2E616E1D736347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-05_f6dfbb35f20044825228705b017d504a_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_f6dfbb35f20044825228705b017d504a_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260629-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_f6dfbb35f20044825228705b017d504a_elex_mafia_stealc_tofsee
- Size 468KB
- SHA256 6c29376c1b6d8a93d829e869146e2ba881f8d61bccac345b21208bd954e7e405
- MD5 f6dfbb35f20044825228705b017d504a
- SHA1 85978aeeba3909fd20159936df9452d0487941be
- SHA512 25799fdfbe500120248f6ba425deeb5baab1ecbfc7f7e137aeed7be895278077613de44418c858d2c314d5eacc9c33255cacba087a574af5615bf2a6c14bda1b
- SSDEEP 12288:qO4rfItL8HGGdwDr2vZkk74pTYbRH2nLwnc87bWmeEVGL:qO4rQtGGOtR0WdELwzumeEVGL
- TLSH T176A4F12A7641C133D24302750FE6DBAAB63E79B40726A4C37BE8427D2E616E1D736347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Deletes itself
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.