General
- Target 2026-07-08_47b4d69c244312acc7e71fd69c1ed20a_elex_mafia_stealc_tofsee
- Size 411KB
- Sample260708-wpdf5sd18r
- SHA256 ec9e1f875a5b1aaec43e734011f271828d4d99d78d0030d8db461986aa614371
- MD5 47b4d69c244312acc7e71fd69c1ed20a
- SHA1 667ec3bb3f0ec0b29eda4e09430d95065b3d4b77
- SHA512 72e6a16ae474e49dfa8aac3368ee77b1df8bb2fc2840e0299cf293b01ded0037afc49e0c6f3355160bd8ab7806a589e20908f288c8faecd6f4e9ead4074412e5
- SSDEEP 6144:gVdvczEb7GUOpYWhNVynE/mF07CmK2C4fdeqe3LmAfVgYCWM0vLRcEPqHI:gZLolhNVyEf7Cx4xe3L9gYCWM0vOEqHI
- TLSH T14194DF28A6C1C036D19301314BBAD772253A7DB65B6264CBB3D43B7D1EB43D1A67A30B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_47b4d69c244312acc7e71fd69c1ed20a_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_47b4d69c244312acc7e71fd69c1ed20a_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260706-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_47b4d69c244312acc7e71fd69c1ed20a_elex_mafia_stealc_tofsee
- Size 411KB
- SHA256 ec9e1f875a5b1aaec43e734011f271828d4d99d78d0030d8db461986aa614371
- MD5 47b4d69c244312acc7e71fd69c1ed20a
- SHA1 667ec3bb3f0ec0b29eda4e09430d95065b3d4b77
- SHA512 72e6a16ae474e49dfa8aac3368ee77b1df8bb2fc2840e0299cf293b01ded0037afc49e0c6f3355160bd8ab7806a589e20908f288c8faecd6f4e9ead4074412e5
- SSDEEP 6144:gVdvczEb7GUOpYWhNVynE/mF07CmK2C4fdeqe3LmAfVgYCWM0vLRcEPqHI:gZLolhNVyEf7Cx4xe3L9gYCWM0vOEqHI
- TLSH T14194DF28A6C1C036D19301314BBAD772253A7DB65B6264CBB3D43B7D1EB43D1A67A30B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Deletes itself
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.