General
- Target 2026-07-07_5f7f29d8cc4d5daf9adbe6b3c9e341e3_elex_mafia_stealc_tofsee
- Size 546KB
- Sample260707-qhs1csfx3n
- SHA256 b5a2db826c1a1469b796cc8f029344204e015fc1b6c2ccd9074da4bf35f455cb
- MD5 5f7f29d8cc4d5daf9adbe6b3c9e341e3
- SHA1 e2c1d4fb1c891d640a2028cdbaf09a99fcf8762d
- SHA512 c645e92e5d757248c16cec5f820470d675c1623073a30d9c010b1e3f1ea00abc8db70deee61aa6c3f8ff7fd1e9adf6928aed95873f2dca326a7700319fae21e0
- SSDEEP 12288:9U5rCOTei6cp5yGZATFZWgu7oqZoXWjdq:9UQOJ68UFE1oqqGh
- TLSH T1F2C4F1227985C032E59302314AE6EBB2A93B7D355B2264C77BC4A36E6FB12D1D770347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-07_5f7f29d8cc4d5daf9adbe6b3c9e341e3_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_5f7f29d8cc4d5daf9adbe6b3c9e341e3_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260706-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_5f7f29d8cc4d5daf9adbe6b3c9e341e3_elex_mafia_stealc_tofsee
- Size 546KB
- SHA256 b5a2db826c1a1469b796cc8f029344204e015fc1b6c2ccd9074da4bf35f455cb
- MD5 5f7f29d8cc4d5daf9adbe6b3c9e341e3
- SHA1 e2c1d4fb1c891d640a2028cdbaf09a99fcf8762d
- SHA512 c645e92e5d757248c16cec5f820470d675c1623073a30d9c010b1e3f1ea00abc8db70deee61aa6c3f8ff7fd1e9adf6928aed95873f2dca326a7700319fae21e0
- SSDEEP 12288:9U5rCOTei6cp5yGZATFZWgu7oqZoXWjdq:9UQOJ68UFE1oqqGh
- TLSH T1F2C4F1227985C032E59302314AE6EBB2A93B7D355B2264C77BC4A36E6FB12D1D770347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.