General
- Target 2026-07-08_eecb84f5c47a87891df7e06b889356b6_elex_mafia_stealc_tofsee
- Size 505KB
- Sample260708-m5nsdafw2j
- SHA256 319da91bc7906061f49ab85f8d4c187b9ee111268439320e611bf045585e75c5
- MD5 eecb84f5c47a87891df7e06b889356b6
- SHA1 4bf53b75f3da7497a2a5999ec2e83c0e123f6ab0
- SHA512 6cc8b8765d318bcd171e9f4af71c0adb449d0c1ca14cbcfc2e2ebafcc0628718c55e992604e4d5dd4d908922ad234409eec39148dc5e782848ec11da81fb6d57
- SSDEEP 6144:oorf3lPvovsgZnqG2C7mOTeiL/DLxGJM4r5Urn5+4kU9MxBK3BaIe64VPMbVK1BD:NU5rCOTeijhGJdHnx8xxe3RyYwTZwlH
- TLSH T1B1B4F1217685C133E6D202725EE6EBB2293BBC355722A4C33794673E2EB57E19335306
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_eecb84f5c47a87891df7e06b889356b6_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_eecb84f5c47a87891df7e06b889356b6_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260706-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_eecb84f5c47a87891df7e06b889356b6_elex_mafia_stealc_tofsee
- Size 505KB
- SHA256 319da91bc7906061f49ab85f8d4c187b9ee111268439320e611bf045585e75c5
- MD5 eecb84f5c47a87891df7e06b889356b6
- SHA1 4bf53b75f3da7497a2a5999ec2e83c0e123f6ab0
- SHA512 6cc8b8765d318bcd171e9f4af71c0adb449d0c1ca14cbcfc2e2ebafcc0628718c55e992604e4d5dd4d908922ad234409eec39148dc5e782848ec11da81fb6d57
- SSDEEP 6144:oorf3lPvovsgZnqG2C7mOTeiL/DLxGJM4r5Urn5+4kU9MxBK3BaIe64VPMbVK1BD:NU5rCOTeijhGJdHnx8xxe3RyYwTZwlH
- TLSH T1B1B4F1217685C133E6D202725EE6EBB2293BBC355722A4C33794673E2EB57E19335306
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.