General
- Target 2026-07-08_23663644db4c5cbaa4a27a9d87ae1d02_elex_mafia_stealc_tofsee
- Size 652KB
- Sample260708-jdvvtsdw6q
- SHA256 88ee93f78ea85ab9e0a1ee85bf3efa26c488daf413a320e5853665c7a186d873
- MD5 23663644db4c5cbaa4a27a9d87ae1d02
- SHA1 9cecb91e8f00dd0be075801d388472dc02712a06
- SHA512 53056d70427531c1c7aa7964e227634f82a290d2bb49c6da118e21db61ced4cbbf81218f9809489230791834fa180628a440062de1825df37a5ecf7cb8af4541
- SSDEEP 12288:wU5rCOTeiDS3qdXr6wpHl+/Klsqt0Y095NZ+3/v+I9hUG2VA:wUQOJDS3qtmwllimsq2Z5NGEA
- TLSH T136E4D12177D8C536E9F7037859B5E6614D7EBD22A722D6CF2F9011AE09B1BC08A31723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_23663644db4c5cbaa4a27a9d87ae1d02_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_23663644db4c5cbaa4a27a9d87ae1d02_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260706-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_23663644db4c5cbaa4a27a9d87ae1d02_elex_mafia_stealc_tofsee
- Size 652KB
- SHA256 88ee93f78ea85ab9e0a1ee85bf3efa26c488daf413a320e5853665c7a186d873
- MD5 23663644db4c5cbaa4a27a9d87ae1d02
- SHA1 9cecb91e8f00dd0be075801d388472dc02712a06
- SHA512 53056d70427531c1c7aa7964e227634f82a290d2bb49c6da118e21db61ced4cbbf81218f9809489230791834fa180628a440062de1825df37a5ecf7cb8af4541
- SSDEEP 12288:wU5rCOTeiDS3qdXr6wpHl+/Klsqt0Y095NZ+3/v+I9hUG2VA:wUQOJDS3qtmwllimsq2Z5NGEA
- TLSH T136E4D12177D8C536E9F7037859B5E6614D7EBD22A722D6CF2F9011AE09B1BC08A31723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.