General
- Target 2026-07-09_10ff4480583b05509f34393a04840ed6_elex_mafia_stealc_tofsee
- Size 505KB
- Sample260709-qc8tmaa17k
- SHA256 ecece180eadf935606ae591d8b4a63be16f0a821ea37ae63c0386027f9a85bb8
- MD5 10ff4480583b05509f34393a04840ed6
- SHA1 dac41956ea7079055c5c09c8b330f29ddd90d5ce
- SHA512 7e296f09a00536e4ce04a8d6449600a10bf5791992557e535a9f364bddc4cbcab06b03c957d54a3ea082566c69ad32c2dce1144181d9d55f011f345f0ab9eff2
- SSDEEP 6144:oorf3lPvovsgZnqG2C7mOTeiL/DL95rh4TQNNIzPc/HESbYd2WQnKgXRsH3jZZqx:NU5rCOTeijzyQNEPcfzBK42TZwlH
- TLSH T197B4F129B680C532E5D311710EE6DBA26A3E7C355726A4C73780A26E2FB23E1D775307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_10ff4480583b05509f34393a04840ed6_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_10ff4480583b05509f34393a04840ed6_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260706-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_10ff4480583b05509f34393a04840ed6_elex_mafia_stealc_tofsee
- Size 505KB
- SHA256 ecece180eadf935606ae591d8b4a63be16f0a821ea37ae63c0386027f9a85bb8
- MD5 10ff4480583b05509f34393a04840ed6
- SHA1 dac41956ea7079055c5c09c8b330f29ddd90d5ce
- SHA512 7e296f09a00536e4ce04a8d6449600a10bf5791992557e535a9f364bddc4cbcab06b03c957d54a3ea082566c69ad32c2dce1144181d9d55f011f345f0ab9eff2
- SSDEEP 6144:oorf3lPvovsgZnqG2C7mOTeiL/DL95rh4TQNNIzPc/HESbYd2WQnKgXRsH3jZZqx:NU5rCOTeijzyQNEPcfzBK42TZwlH
- TLSH T197B4F129B680C532E5D311710EE6DBA26A3E7C355726A4C73780A26E2FB23E1D775307
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.