General
- Target 2026-07-06_8b89f3ccc3ee31913577303d2778bfd7_elex_mafia_stealc_tofsee
- Size 411KB
- Sample260707-cwmtlsf12w
- SHA256 9f40ae9e1e2ced6c9484804e29caf749fcad05a93984347e4973540d1c79f8b7
- MD5 8b89f3ccc3ee31913577303d2778bfd7
- SHA1 da0a0cc489a78697f5295319e62c598bbfc1bb2d
- SHA512 758b68fcc140b169ea10d599b9f2d96623266f27b5fd9707918a5cccdd0d8679d4cd053ac9ba3bb3cda808df8d4efc43a27874957a7a99663606aa02f9781076
- SSDEEP 6144:gVdvczEb7GUOpYWhNVynE/mFCHAQCnmHpr715EKG59XbHxvcsqH:gZLolhNVyEvgQemFB5eBcsqH
- TLSH T1A694D028B681C032D19305318AF6D771253A7DB54B61A4CBB7D8377E2EB43D1A67A30B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_8b89f3ccc3ee31913577303d2778bfd7_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_8b89f3ccc3ee31913577303d2778bfd7_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260706-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_8b89f3ccc3ee31913577303d2778bfd7_elex_mafia_stealc_tofsee
- Size 411KB
- SHA256 9f40ae9e1e2ced6c9484804e29caf749fcad05a93984347e4973540d1c79f8b7
- MD5 8b89f3ccc3ee31913577303d2778bfd7
- SHA1 da0a0cc489a78697f5295319e62c598bbfc1bb2d
- SHA512 758b68fcc140b169ea10d599b9f2d96623266f27b5fd9707918a5cccdd0d8679d4cd053ac9ba3bb3cda808df8d4efc43a27874957a7a99663606aa02f9781076
- SSDEEP 6144:gVdvczEb7GUOpYWhNVynE/mFCHAQCnmHpr715EKG59XbHxvcsqH:gZLolhNVyEvgQemFB5eBcsqH
- TLSH T1A694D028B681C032D19305318AF6D771253A7DB54B61A4CBB7D8377E2EB43D1A67A30B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Deletes itself
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.