General
- Target 2026-07-06_6ab56330c0854341356334805c232575_elex_mafia_stealc_tofsee
- Size 529KB
- Sample260706-t14rcsdv8p
- SHA256 bd87d4d98b0819b49b114ecbe31018d78c55747dd2531484960c2974a8abd4ae
- MD5 6ab56330c0854341356334805c232575
- SHA1 c7218a221f57ead665b7e8ea15b0802c1615c615
- SHA512 49c6987ca8ef1571af022b2a3f9dd8a4116cbe3a6d50b6214de887ef20300ec3e93433c1d24c5276b368b4fa74919ad5cb5f7879f968a89ff970be19dc53b24f
- SSDEEP 12288:NU5rCOTeijOWgJdL7svLMLQa3QOdyTZwlH4Hp:NUQOJjCL7YMD3QOdyTSlH4Hp
- TLSH T142B4F026B685C233D2D202B10ED6EBB26A3B7C75472654C32B94623E2F756D1D375343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_6ab56330c0854341356334805c232575_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_6ab56330c0854341356334805c232575_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260630-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_6ab56330c0854341356334805c232575_elex_mafia_stealc_tofsee
- Size 529KB
- SHA256 bd87d4d98b0819b49b114ecbe31018d78c55747dd2531484960c2974a8abd4ae
- MD5 6ab56330c0854341356334805c232575
- SHA1 c7218a221f57ead665b7e8ea15b0802c1615c615
- SHA512 49c6987ca8ef1571af022b2a3f9dd8a4116cbe3a6d50b6214de887ef20300ec3e93433c1d24c5276b368b4fa74919ad5cb5f7879f968a89ff970be19dc53b24f
- SSDEEP 12288:NU5rCOTeijOWgJdL7svLMLQa3QOdyTZwlH4Hp:NUQOJjCL7YMD3QOdyTSlH4Hp
- TLSH T142B4F026B685C233D2D202B10ED6EBB26A3B7C75472654C32B94623E2F756D1D375343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Executes dropped EXE
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.