2026-07-06_64b0eb1299f48aa29ebfdbd3dea85f48_elex_mafia_stealc_tofsee

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-06_64b0eb1299f48aa29ebfdbd3dea85f48_elex_mafia_stealc_tofsee
Size 435KB
Sample260707-dwecxagy6v
SHA256 79abffc78448ed5689c19f8426cfe2a3c5c9c13cda1424f7452a90d8e42f9c6d
MD5 64b0eb1299f48aa29ebfdbd3dea85f48
SHA1 13eab6b1bc9676fe9b3f0cf2e372e51281f40ea6
SHA512 203ddfd5926a0dea838319bd145a145e4c0cc240238a041a1cdcca5fad2fd19f8739bb2fa0d163b379435fd7bd3b5ce3df9410a703e2457436a77f948651bec7
SSDEEP 6144:arxfv4co9ZL3GBGgjODxbfVhxjvDKwsQWWsbxk1tDsI+uEbX9H7fE8NxZsumB:sm48gODxbNvvWv2Kh79NxZsXB
TLSH
T14E94D02872808133D18202310BAAD7A56A3E7CB25775A8D33BE8766D1FB17D1E77534B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-06_64b0eb1299f48aa29ebfdbd3dea85f48_elex_mafia_stealc_tofsee

File Explorer

2026-07-06_64b0eb1299f48aa29ebfdbd3dea85f48_elex_mafia_stealc_tofsee

.exe 435KB

2026-07-06_64b0eb1299f48aa29ebfdbd3dea85f48_elex_mafia_stealc_tofsee

SHA256 79abffc78448ed5689c19f8426cfe2a3c5c9c13cda1424f7452a90d8e42f9c6d
MD5 64b0eb1299f48aa29ebfdbd3dea85f48
SHA1 13eab6b1bc9676fe9b3f0cf2e372e51281f40ea6
SHA512 203ddfd5926a0dea838319bd145a145e4c0cc240238a041a1cdcca5fad2fd19f8739bb2fa0d163b379435fd7bd3b5ce3df9410a703e2457436a77f948651bec7
SSDEEP 6144:arxfv4co9ZL3GBGgjODxbfVhxjvDKwsQWWsbxk1tDsI+uEbX9H7fE8NxZsumB:sm48gODxbNvvWv2Kh79NxZsXB
TLSH
T14E94D02872808133D18202310BAAD7A56A3E7CB25775A8D33BE8766D1FB17D1E77534B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

70582

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

137KB

Virtual Size

136KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

24KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

183KB

Virtual Size

205KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

28KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rdata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

BSS

Size

7KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

6KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-06_64b0eb1299f48aa29ebfdbd3dea85f48_elex_mafia_stealc_tofsee

generic