General
- Target 2026-07-08_7fbe58b1f761ac95b465ee4d24224afc_elex_mafia_stealc_tofsee
- Size 384KB
- Sample260708-e34rtabv9q
- SHA256 e2c159094aaddadea8361f5bc8af574a69c58dfb37aab6432f960665f87bc0de
- MD5 7fbe58b1f761ac95b465ee4d24224afc
- SHA1 47b97a5f8c318a55a1d818253bdf33fbeac4d5d1
- SHA512 aed07404801f0111617d0e62cca28e0964d0cc894f05505eebb4895c668a0656ca739f35d81b356b3b086ffe14ced056c9363c2b70d30d4242addbb9a35922c7
- SSDEEP 6144:drxfv4co9ZL3GBGgjODxbf7hHw/YNiw8JY3pjn9LO3FLesSNMMd6P/3uZ:Zm48gODxbzK/YNZ5jn9y1Ez6X3uZ
- TLSH T1FA84DF2476C1C036D19701324BF6EB61293A3DB6976568C77BE43BAD9EB03C1A73424B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_7fbe58b1f761ac95b465ee4d24224afc_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_7fbe58b1f761ac95b465ee4d24224afc_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260706-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_7fbe58b1f761ac95b465ee4d24224afc_elex_mafia_stealc_tofsee
- Size 384KB
- SHA256 e2c159094aaddadea8361f5bc8af574a69c58dfb37aab6432f960665f87bc0de
- MD5 7fbe58b1f761ac95b465ee4d24224afc
- SHA1 47b97a5f8c318a55a1d818253bdf33fbeac4d5d1
- SHA512 aed07404801f0111617d0e62cca28e0964d0cc894f05505eebb4895c668a0656ca739f35d81b356b3b086ffe14ced056c9363c2b70d30d4242addbb9a35922c7
- SSDEEP 6144:drxfv4co9ZL3GBGgjODxbf7hHw/YNiw8JY3pjn9LO3FLesSNMMd6P/3uZ:Zm48gODxbzK/YNZ5jn9y1Ez6X3uZ
- TLSH T1FA84DF2476C1C036D19701324BF6EB61293A3DB6976568C77BE43BAD9EB03C1A73424B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Deletes itself
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.