General
- Target 2026-07-08_829868cf98f80766b4404b1bada22cc8_elex_mafia_stealc_tofsee
- Size 652KB
- Sample260708-v39aasex6v
- SHA256 90069dc61699a2d9c866c135953cb2ff27d3fd9c4c23c6a3312fe40b9a247bd1
- MD5 829868cf98f80766b4404b1bada22cc8
- SHA1 88c2d66c10d9af3fd444d9ab1fdbdb58729cfb98
- SHA512 551f8d6a5f4cd5b09a3813b94b3262afebfc1bf9094919a37520258bd133071ef6458aac0f63e25d4a45903d7d110ecdef608a51660a48ff327596483bb41ae6
- SSDEEP 12288:wU5rCOTeiDBJQxzYSEKhfu9LznHf4W9LNZ+3/v+I9hUG2VA:wUQOJDL9txHwaNGEA
- TLSH T1C1E4D02173D88532E5FB077859B5E6614D7EBD32A722C6CF2F8016AE0971BD09A31723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_829868cf98f80766b4404b1bada22cc8_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_829868cf98f80766b4404b1bada22cc8_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260706-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_829868cf98f80766b4404b1bada22cc8_elex_mafia_stealc_tofsee
- Size 652KB
- SHA256 90069dc61699a2d9c866c135953cb2ff27d3fd9c4c23c6a3312fe40b9a247bd1
- MD5 829868cf98f80766b4404b1bada22cc8
- SHA1 88c2d66c10d9af3fd444d9ab1fdbdb58729cfb98
- SHA512 551f8d6a5f4cd5b09a3813b94b3262afebfc1bf9094919a37520258bd133071ef6458aac0f63e25d4a45903d7d110ecdef608a51660a48ff327596483bb41ae6
- SSDEEP 12288:wU5rCOTeiDBJQxzYSEKhfu9LznHf4W9LNZ+3/v+I9hUG2VA:wUQOJDL9txHwaNGEA
- TLSH T1C1E4D02173D88532E5FB077859B5E6614D7EBD32A722C6CF2F8016AE0971BD09A31723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.