General
- Target 2026-07-06_46876df88cc3903ee73a522c0e8e8ebf_elex_mafia_stealc_tofsee
- Size 487KB
- Sample260706-splkzacy4r
- SHA256 4412862435ed1e9286b54594c3c94ac16f73ac00cec5886ecc897fff52b888b4
- MD5 46876df88cc3903ee73a522c0e8e8ebf
- SHA1 3d2fc2972bd7e634b71d082a2f3be54de325b007
- SHA512 7abc64c266607ce123c9e98b7e2f24bd67be21020daff2eb4a9f9b0c8f26837300ff8d11c885dd30038d90bdc05cea0f864d9acef281a8745aa32fae22bb5258
- SSDEEP 12288:HU5rCOTeiJjp3leQggRfmb1YE12FNv/9jV//u+NZ:HUQOJJBAXgk1niNv/9xPN
- TLSH T1FCB4F125B585C032E19602304AE2EBB2693B7D715B25A4C73B94777E6FB03E1A778307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_46876df88cc3903ee73a522c0e8e8ebf_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_46876df88cc3903ee73a522c0e8e8ebf_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_46876df88cc3903ee73a522c0e8e8ebf_elex_mafia_stealc_tofsee
- Size 487KB
- SHA256 4412862435ed1e9286b54594c3c94ac16f73ac00cec5886ecc897fff52b888b4
- MD5 46876df88cc3903ee73a522c0e8e8ebf
- SHA1 3d2fc2972bd7e634b71d082a2f3be54de325b007
- SHA512 7abc64c266607ce123c9e98b7e2f24bd67be21020daff2eb4a9f9b0c8f26837300ff8d11c885dd30038d90bdc05cea0f864d9acef281a8745aa32fae22bb5258
- SSDEEP 12288:HU5rCOTeiJjp3leQggRfmb1YE12FNv/9jV//u+NZ:HUQOJJBAXgk1niNv/9xPN
- TLSH T1FCB4F125B585C032E19602304AE2EBB2693B7D715B25A4C73B94777E6FB03E1A778307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.