General
- Target 2026-07-07_884e9fd49ab7ed1e1122cbbd1530257a_elex_mafia_stealc_tofsee
- Size 541KB
- Sample260707-y19d3aes6k
- SHA256 2843bcd22cfbb64bd8aba6f9650a3555d632b579471492aa75a9a2c213a4fd4e
- MD5 884e9fd49ab7ed1e1122cbbd1530257a
- SHA1 6991752e10ba4759b5819f9e8e41db3076ba0a69
- SHA512 e0fcce773509cbd322a777d6d2e172d8005a624f2f1d8f9489d4a65e9ccf4fd9a4d732dbcf33ba3d41c1b1e76a349b41c6e19daa77a5a5c71f6d594c41888561
- SSDEEP 12288:HU5rCOTeiJZHwoUIxNtjuEdicNZb73ctO:HUQOJJZQWxrjuGicNV73ctO
- TLSH T134C4F122B644C232D29202310ADAEBA27A3F7D71572654C337D4A77E1BB1AE1D3B5347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-07_884e9fd49ab7ed1e1122cbbd1530257a_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_884e9fd49ab7ed1e1122cbbd1530257a_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260706-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_884e9fd49ab7ed1e1122cbbd1530257a_elex_mafia_stealc_tofsee
- Size 541KB
- SHA256 2843bcd22cfbb64bd8aba6f9650a3555d632b579471492aa75a9a2c213a4fd4e
- MD5 884e9fd49ab7ed1e1122cbbd1530257a
- SHA1 6991752e10ba4759b5819f9e8e41db3076ba0a69
- SHA512 e0fcce773509cbd322a777d6d2e172d8005a624f2f1d8f9489d4a65e9ccf4fd9a4d732dbcf33ba3d41c1b1e76a349b41c6e19daa77a5a5c71f6d594c41888561
- SSDEEP 12288:HU5rCOTeiJZHwoUIxNtjuEdicNZb73ctO:HUQOJJZQWxrjuGicNV73ctO
- TLSH T134C4F122B644C232D29202310ADAEBA27A3F7D71572654C337D4A77E1BB1AE1D3B5347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.