General
- Target 2026-07-08_630abbe3372b6c339983493c0dc6483b_elex_mafia_stealc_tofsee
- Size 652KB
- Sample260708-jb34esdv9p
- SHA256 8829f22c2348cb83ce9859b35572efc925bcf1155956c5e1e27d735f0f39b507
- MD5 630abbe3372b6c339983493c0dc6483b
- SHA1 1a7730905d000393905143002fb7b400d7371711
- SHA512 668a8e35a1316ed65da5bb9635d4b7fcc9f5166b51d509181cfd3b5fb990af11d0db9ae0dfb3addcd8186d17558c7605c531d3b0d05dc6c3b12079803157adb0
- SSDEEP 12288:wU5rCOTeiDHZ15L7S/29FtchwOAeqYT4KXNZ+3/v+I9hUG2VA:wUQOJDHvlc2jtaAe3NGEA
- TLSH T1E8E4D02073D88536E5FB037859B5E6644E7EBD366722D6DF2F8412AE0A71BC08631723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_630abbe3372b6c339983493c0dc6483b_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_630abbe3372b6c339983493c0dc6483b_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260706-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_630abbe3372b6c339983493c0dc6483b_elex_mafia_stealc_tofsee
- Size 652KB
- SHA256 8829f22c2348cb83ce9859b35572efc925bcf1155956c5e1e27d735f0f39b507
- MD5 630abbe3372b6c339983493c0dc6483b
- SHA1 1a7730905d000393905143002fb7b400d7371711
- SHA512 668a8e35a1316ed65da5bb9635d4b7fcc9f5166b51d509181cfd3b5fb990af11d0db9ae0dfb3addcd8186d17558c7605c531d3b0d05dc6c3b12079803157adb0
- SSDEEP 12288:wU5rCOTeiDHZ15L7S/29FtchwOAeqYT4KXNZ+3/v+I9hUG2VA:wUQOJDHvlc2jtaAe3NGEA
- TLSH T1E8E4D02073D88536E5FB037859B5E6644E7EBD366722D6DF2F8412AE0A71BC08631723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.