General
- Target 2026-07-08_c72a885ef4e434bef6bf2898a074d53f_elex_mafia_stealc_tofsee
- Size 546KB
- Sample260708-ve652ad14w
- SHA256 6b868c9f641b98684eb85714726d4b536681ec2540b9e3c8ecf6d2afe8396f2d
- MD5 c72a885ef4e434bef6bf2898a074d53f
- SHA1 255c5ff877226f1712cea21278b296bb65895453
- SHA512 6fb8197dc3018e64de2051e4db3472f6196afbbd031c613914a3e1d36618609317fdff1bc81c8b286e90c70f98e5541c89abdaff292d8df0d6efec4f02f688c6
- SSDEEP 12288:9U5rCOTei6OsAYBTbsy9FhyyJB+LJAW7bFqZoXWjdq:9UQOJ6OsL0y9FtBkJFqqGh
- TLSH T1AEC4F122B545C032E59202314AE6EBB2593EBC354B26A4C77BC0776E2FB52E1E775307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_c72a885ef4e434bef6bf2898a074d53f_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_c72a885ef4e434bef6bf2898a074d53f_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260706-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_c72a885ef4e434bef6bf2898a074d53f_elex_mafia_stealc_tofsee
- Size 546KB
- SHA256 6b868c9f641b98684eb85714726d4b536681ec2540b9e3c8ecf6d2afe8396f2d
- MD5 c72a885ef4e434bef6bf2898a074d53f
- SHA1 255c5ff877226f1712cea21278b296bb65895453
- SHA512 6fb8197dc3018e64de2051e4db3472f6196afbbd031c613914a3e1d36618609317fdff1bc81c8b286e90c70f98e5541c89abdaff292d8df0d6efec4f02f688c6
- SSDEEP 12288:9U5rCOTei6OsAYBTbsy9FhyyJB+LJAW7bFqZoXWjdq:9UQOJ6OsL0y9FtBkJFqqGh
- TLSH T1AEC4F122B545C032E59202314AE6EBB2593EBC354B26A4C77BC0776E2FB52E1E775307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.