General
- Target 2026-07-06_230b5d422cdc58b323ce203d174a3d61_elex_mafia_stealc_tofsee
- Size 546KB
- Sample260706-2ab8escw9y
- SHA256 17d51fa4fa787ba833d7909374708ddb83b56d372a921ba2f0931f25c7f664cf
- MD5 230b5d422cdc58b323ce203d174a3d61
- SHA1 34a5f4e66d41c35b8c70823c035bd3828b2a885c
- SHA512 c0af9209ea4ca2d0fd902531ed2e2af3e608e21051876196a38ef95da3fd6cd9f14d5dea22cd01ba488dfc78b052e948d782a98c1efb90d414d2507680caa351
- SSDEEP 12288:9U5rCOTei6d2Cogs0kWkTEdSDGLSpGSVdDKqZoXWjdq:9UQOJ6d7oB0HhdSDzpPRKqqGh
- TLSH T122C40225B585C032E59212314EE2EFB22A3ABC355B2664C73B94776E6F742E1D374307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_230b5d422cdc58b323ce203d174a3d61_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_230b5d422cdc58b323ce203d174a3d61_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260706-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_230b5d422cdc58b323ce203d174a3d61_elex_mafia_stealc_tofsee
- Size 546KB
- SHA256 17d51fa4fa787ba833d7909374708ddb83b56d372a921ba2f0931f25c7f664cf
- MD5 230b5d422cdc58b323ce203d174a3d61
- SHA1 34a5f4e66d41c35b8c70823c035bd3828b2a885c
- SHA512 c0af9209ea4ca2d0fd902531ed2e2af3e608e21051876196a38ef95da3fd6cd9f14d5dea22cd01ba488dfc78b052e948d782a98c1efb90d414d2507680caa351
- SSDEEP 12288:9U5rCOTei6d2Cogs0kWkTEdSDGLSpGSVdDKqZoXWjdq:9UQOJ6d7oB0HhdSDzpPRKqqGh
- TLSH T122C40225B585C032E59212314EE2EFB22A3ABC355B2664C73B94776E6F742E1D374307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.