General
- Target 2026-07-08_2c7d83095a58a5f1cf55c8755194784e_elex_mafia_stealc_tofsee
- Size 546KB
- Sample260708-nlcfnsfz5j
- SHA256 5c41386ac840a3dca45749ac79a4e5127943e9e4925389873729da2d57dde555
- MD5 2c7d83095a58a5f1cf55c8755194784e
- SHA1 b6ff80a5192a52af73ba2e576a6fe7c693537d9b
- SHA512 556fff864cebe1f1d977a9696d19443e13c2c0c07cf423ea4a4f9e3e2110b808288bd1fcbe26d9b7dabc9a2eb5d8f6db60ef4556320d5542aa4cad2f6d9784b9
- SSDEEP 12288:9U5rCOTei6zZLtJSazV68e5ndTOB2vEwqv8GzqnqZoXWjdq:9UQOJ6zDJSyo8Mv9qEGzwqqGh
- TLSH T1F1C4F121B584C432E99202350EE5EFA2597E7C319B26A4C73BC0B76E6F752E1D739306
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_2c7d83095a58a5f1cf55c8755194784e_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_2c7d83095a58a5f1cf55c8755194784e_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260706-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_2c7d83095a58a5f1cf55c8755194784e_elex_mafia_stealc_tofsee
- Size 546KB
- SHA256 5c41386ac840a3dca45749ac79a4e5127943e9e4925389873729da2d57dde555
- MD5 2c7d83095a58a5f1cf55c8755194784e
- SHA1 b6ff80a5192a52af73ba2e576a6fe7c693537d9b
- SHA512 556fff864cebe1f1d977a9696d19443e13c2c0c07cf423ea4a4f9e3e2110b808288bd1fcbe26d9b7dabc9a2eb5d8f6db60ef4556320d5542aa4cad2f6d9784b9
- SSDEEP 12288:9U5rCOTei6zZLtJSazV68e5ndTOB2vEwqv8GzqnqZoXWjdq:9UQOJ6zDJSyo8Mv9qEGzwqqGh
- TLSH T1F1C4F121B584C432E99202350EE5EFA2597E7C319B26A4C73BC0B76E6F752E1D739306
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.