General
- Target 2026-07-07_388ada9f661c0a7117a621c9f47e31aa_elex_mafia_stealc_tofsee
- Size 413KB
- Sample260707-mqtp3sds2q
- SHA256 8fe0f5643d76828c45250de0d7b411194e88f2c3d910c6ba7400a32a169c645f
- MD5 388ada9f661c0a7117a621c9f47e31aa
- SHA1 81f3f629c66b992aa18d9fcab477a6889c607006
- SHA512 e286273279ff99c702482b2176dc34b511d4fb3259475b0d0564e608fb6b43f81435c525366f478d6539907bdb672de15c1ebdee79a2cc9b6ba620f18c7f2d67
- SSDEEP 6144:gVdvczEb7GUOpYWhNVynE/mFrcLVogPrmHqHn5pNAaB4KcXT10CJqHg:gZLolhNVyEtZogPrmKHn5pNAaBET9qHg
- TLSH T10694D02572C1C032D59305314AB6DB72153A7DB15B6168CBB3D83B7E2EB03E1A67A31B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-07_388ada9f661c0a7117a621c9f47e31aa_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_388ada9f661c0a7117a621c9f47e31aa_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260706-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_388ada9f661c0a7117a621c9f47e31aa_elex_mafia_stealc_tofsee
- Size 413KB
- SHA256 8fe0f5643d76828c45250de0d7b411194e88f2c3d910c6ba7400a32a169c645f
- MD5 388ada9f661c0a7117a621c9f47e31aa
- SHA1 81f3f629c66b992aa18d9fcab477a6889c607006
- SHA512 e286273279ff99c702482b2176dc34b511d4fb3259475b0d0564e608fb6b43f81435c525366f478d6539907bdb672de15c1ebdee79a2cc9b6ba620f18c7f2d67
- SSDEEP 6144:gVdvczEb7GUOpYWhNVynE/mFrcLVogPrmHqHn5pNAaB4KcXT10CJqHg:gZLolhNVyEtZogPrmKHn5pNAaBET9qHg
- TLSH T10694D02572C1C032D59305314AB6DB72153A7DB15B6168CBB3D83B7E2EB03E1A67A31B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Deletes itself
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.