General
- Target 2026-07-09_f1a9dfa224aefc934bae53e3699d3396_elex_mafia_stealc_tofsee
- Size 652KB
- Sample260709-b5tsvact6t
- SHA256 9a22a5722fdafcb12573e1efa7114dcf5465952b692f2d7895652c6fe26a6004
- MD5 f1a9dfa224aefc934bae53e3699d3396
- SHA1 c35d64b64fc1b2ac0945b12e8d19618f0db9e325
- SHA512 782badf75618959d420317fbc9bb7430c8a0d303f0a9979a24e35aa0ef9c927dbb4bc4467c356fe3ddb32d89c36a23e07ea25caa9169f9e8c8dcff3536766240
- SSDEEP 12288:wU5rCOTeiDm0LxzNnXIWPiJBOqO107gmAQaYK7rTjNZ+3/v+I9hUG2VA:wUQOJDh42iJBKi7fAQlQrTjNGEA
- TLSH T198E4D12173D88532E5F7077859B5E7515E7EBD226722D6CF2F8012AE0AB1BC08A71723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_f1a9dfa224aefc934bae53e3699d3396_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_f1a9dfa224aefc934bae53e3699d3396_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260706-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_f1a9dfa224aefc934bae53e3699d3396_elex_mafia_stealc_tofsee
- Size 652KB
- SHA256 9a22a5722fdafcb12573e1efa7114dcf5465952b692f2d7895652c6fe26a6004
- MD5 f1a9dfa224aefc934bae53e3699d3396
- SHA1 c35d64b64fc1b2ac0945b12e8d19618f0db9e325
- SHA512 782badf75618959d420317fbc9bb7430c8a0d303f0a9979a24e35aa0ef9c927dbb4bc4467c356fe3ddb32d89c36a23e07ea25caa9169f9e8c8dcff3536766240
- SSDEEP 12288:wU5rCOTeiDm0LxzNnXIWPiJBOqO107gmAQaYK7rTjNZ+3/v+I9hUG2VA:wUQOJDh42iJBKi7fAQlQrTjNGEA
- TLSH T198E4D12173D88532E5F7077859B5E7515E7EBD226722D6CF2F8012AE0AB1BC08A71723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.