General
- Target 2026-07-09_3a0b681d4d7efb171d07e66c7200a817_elex_mafia_stealc_tofsee
- Size 473KB
- Sample260709-kn5nfsfv4m
- SHA256 46b1a38cf76d4bc57760cba8c2f08f51407186b4ce34d06bd84007cfbdd7c544
- MD5 3a0b681d4d7efb171d07e66c7200a817
- SHA1 0f89b2671a3a79029604f7d050bf5fad80af3f1d
- SHA512 6c4e4a44d64ea0348cf252555004f0af0b5aade06e947e369e8b2637c1eaec4cad3378d7f879b140b4ed87b5a43da349dc3d441013772948f61548e81aafe55d
- SSDEEP 12288:Nb4bZudi79Lih6G1Dd9dwVdvHXTHWEgUcMA0a:Nb4bcdkLs6ShoHWEU
- TLSH T175A4E0203281C037E2A706344AE6D7B5663D7C658F61A4DB3BC477AE6EB02E1E635347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_3a0b681d4d7efb171d07e66c7200a817_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_3a0b681d4d7efb171d07e66c7200a817_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260706-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_3a0b681d4d7efb171d07e66c7200a817_elex_mafia_stealc_tofsee
- Size 473KB
- SHA256 46b1a38cf76d4bc57760cba8c2f08f51407186b4ce34d06bd84007cfbdd7c544
- MD5 3a0b681d4d7efb171d07e66c7200a817
- SHA1 0f89b2671a3a79029604f7d050bf5fad80af3f1d
- SHA512 6c4e4a44d64ea0348cf252555004f0af0b5aade06e947e369e8b2637c1eaec4cad3378d7f879b140b4ed87b5a43da349dc3d441013772948f61548e81aafe55d
- SSDEEP 12288:Nb4bZudi79Lih6G1Dd9dwVdvHXTHWEgUcMA0a:Nb4bcdkLs6ShoHWEU
- TLSH T175A4E0203281C037E2A706344AE6D7B5663D7C658F61A4DB3BC477AE6EB02E1E635347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Deletes itself
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.