General
- Target 2026-07-05_cf26dd437030a269d63d4147b8ed6285_elex_mafia_stealc_tofsee
- Size 505KB
- Sample260705-tasleadv2x
- SHA256 47f9ae28aded5eef3a3c10dc10f9d0e80035607b65809e8792ee9835bbb9921f
- MD5 cf26dd437030a269d63d4147b8ed6285
- SHA1 1c8cccef236aa52c3521273d8a5f869831bdc0b3
- SHA512 d62d979170f1dfe9a06d5b5a5249edb0bb60b3c0cb627777fc1c45bc98189197469afc06c8b9beffedcceb78a7bdb1f88fadad2f0aaa7cc97b119e2f6d26e3b3
- SSDEEP 6144:oorf3lPvovsgZnqG2C7mOTeiL/DLy10FWaSbMEKYgiktZgdh0CTCUjsntr8GCy42:NU5rCOTeijCyI/pkkdh098hzPTZwlH
- TLSH T135B4F126B581C532D69202710FE6DBE26A3ABD355722A0C33BD4667E2FB12E1D375343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-05_cf26dd437030a269d63d4147b8ed6285_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_cf26dd437030a269d63d4147b8ed6285_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260629-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_cf26dd437030a269d63d4147b8ed6285_elex_mafia_stealc_tofsee
- Size 505KB
- SHA256 47f9ae28aded5eef3a3c10dc10f9d0e80035607b65809e8792ee9835bbb9921f
- MD5 cf26dd437030a269d63d4147b8ed6285
- SHA1 1c8cccef236aa52c3521273d8a5f869831bdc0b3
- SHA512 d62d979170f1dfe9a06d5b5a5249edb0bb60b3c0cb627777fc1c45bc98189197469afc06c8b9beffedcceb78a7bdb1f88fadad2f0aaa7cc97b119e2f6d26e3b3
- SSDEEP 6144:oorf3lPvovsgZnqG2C7mOTeiL/DLy10FWaSbMEKYgiktZgdh0CTCUjsntr8GCy42:NU5rCOTeijCyI/pkkdh098hzPTZwlH
- TLSH T135B4F126B581C532D69202710FE6DBE26A3ABD355722A0C33BD4667E2FB12E1D375343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.