General
- Target 2026-07-07_424aa5ff62c8b888659dcb28b8c48710_elex_mafia_stealc_tofsee
- Size 652KB
- Sample260707-ql79fsax9t
- SHA256 660b20ec6d4794596ed77f9f1d1b86e91b7283da07390fb423de368088a3965c
- MD5 424aa5ff62c8b888659dcb28b8c48710
- SHA1 0b68d2d60f7de867cbc3dd25c256a07c5b6a79fe
- SHA512 00531f2926f50bd580df05a7b441fef9bd7c2ac3c68ea755273d2d0d8f093d76becc7425c19ded5b3293ce13c68b127ff275d8fd0fa1a694366a8da1b3c8cb56
- SSDEEP 12288:wU5rCOTeiDqN0Q4/NVZplzq5QhjRXSA4NZ+3/v+I9hUG2VA:wUQOJDqmQ4/N9lzJphSLNGEA
- TLSH T16BE4D02173D88536E5F7037859B5F6605E7EBD22A722D6CF1F8016AE0A71BD08A71323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-07_424aa5ff62c8b888659dcb28b8c48710_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_424aa5ff62c8b888659dcb28b8c48710_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260706-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_424aa5ff62c8b888659dcb28b8c48710_elex_mafia_stealc_tofsee
- Size 652KB
- SHA256 660b20ec6d4794596ed77f9f1d1b86e91b7283da07390fb423de368088a3965c
- MD5 424aa5ff62c8b888659dcb28b8c48710
- SHA1 0b68d2d60f7de867cbc3dd25c256a07c5b6a79fe
- SHA512 00531f2926f50bd580df05a7b441fef9bd7c2ac3c68ea755273d2d0d8f093d76becc7425c19ded5b3293ce13c68b127ff275d8fd0fa1a694366a8da1b3c8cb56
- SSDEEP 12288:wU5rCOTeiDqN0Q4/NVZplzq5QhjRXSA4NZ+3/v+I9hUG2VA:wUQOJDqmQ4/N9lzJphSLNGEA
- TLSH T16BE4D02173D88536E5F7037859B5F6605E7EBD22A722D6CF1F8016AE0A71BD08A71323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.