General
- Target 2026-07-09_a4578b117829013dbed52e6a9b6c97b5_elex_mafia_stealc_tofsee
- Size 505KB
- Sample260709-pqpr8sat9l
- SHA256 5e23ac0909dd3cdbd05ee3d8e13b6fd30858a52f80935bbfe5bf12992e9d5128
- MD5 a4578b117829013dbed52e6a9b6c97b5
- SHA1 e01b3fd34e1db601aaf179afee50bea830c5a801
- SHA512 d132993422d249b6b43427456af60c579c35d288090adb866f55d84349b0248df965aa73d04945900cec5c494d544fefff979b7180b9c91c6a8aa3846f999131
- SSDEEP 12288:NU5rCOTeijUPUeB1Gh98z02W+nfVeTZwlH:NUQOJjUPxB1Ghsr/f0TSlH
- TLSH T113B4E125B644C533E6D202710AE6EBB26A3FBC35572654C33B84A67E2FB12D1A374347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_a4578b117829013dbed52e6a9b6c97b5_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_a4578b117829013dbed52e6a9b6c97b5_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260706-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_a4578b117829013dbed52e6a9b6c97b5_elex_mafia_stealc_tofsee
- Size 505KB
- SHA256 5e23ac0909dd3cdbd05ee3d8e13b6fd30858a52f80935bbfe5bf12992e9d5128
- MD5 a4578b117829013dbed52e6a9b6c97b5
- SHA1 e01b3fd34e1db601aaf179afee50bea830c5a801
- SHA512 d132993422d249b6b43427456af60c579c35d288090adb866f55d84349b0248df965aa73d04945900cec5c494d544fefff979b7180b9c91c6a8aa3846f999131
- SSDEEP 12288:NU5rCOTeijUPUeB1Gh98z02W+nfVeTZwlH:NUQOJjUPxB1Ghsr/f0TSlH
- TLSH T113B4E125B644C533E6D202710AE6EBB26A3FBC35572654C33B84A67E2FB12D1A374347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Executes dropped EXE
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.