General
- Target 2026-07-09_653eb8e630b86b572ac65d4ec8b4e830_elex_mafia_stealc_tofsee
- Size 546KB
- Sample260709-kfcbyafs3p
- SHA256 e3e737d8ba3decd464af9f84408de20bf9adca1be3dfe72daf0341a08ce186d0
- MD5 653eb8e630b86b572ac65d4ec8b4e830
- SHA1 1b6602fc8b2913c19a6e5d773a4ec24ef2bd58c3
- SHA512 f9b6eaddde786d8b397a9854467ab61f48a8dfd969c61211f849ed061aee9a827c12a2b9ec97eaeef2dfcab5ded8043692f125056acfffc2b950f78238e803cb
- SSDEEP 12288:9U5rCOTei68QPgcVQYbNwX72h/ZOKMsqZoXWjdq:9UQOJ6vzfbyXqIsqqGh
- TLSH T1A7C4F121B584C032E99202314AE6EBB2697ABC35572264C77BC0737E6FB52E1E775307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_653eb8e630b86b572ac65d4ec8b4e830_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_653eb8e630b86b572ac65d4ec8b4e830_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260706-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_653eb8e630b86b572ac65d4ec8b4e830_elex_mafia_stealc_tofsee
- Size 546KB
- SHA256 e3e737d8ba3decd464af9f84408de20bf9adca1be3dfe72daf0341a08ce186d0
- MD5 653eb8e630b86b572ac65d4ec8b4e830
- SHA1 1b6602fc8b2913c19a6e5d773a4ec24ef2bd58c3
- SHA512 f9b6eaddde786d8b397a9854467ab61f48a8dfd969c61211f849ed061aee9a827c12a2b9ec97eaeef2dfcab5ded8043692f125056acfffc2b950f78238e803cb
- SSDEEP 12288:9U5rCOTei68QPgcVQYbNwX72h/ZOKMsqZoXWjdq:9UQOJ6vzfbyXqIsqqGh
- TLSH T1A7C4F121B584C032E99202314AE6EBB2697ABC35572264C77BC0737E6FB52E1E775307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.