General
- Target 2026-07-09_7b7e273ddbd99abc8a23b0007ecb462f_elex_mafia_stealc_tofsee
- Size 413KB
- Sample260709-r4ekjact4m
- SHA256 01b13d6788cc77b57c5af8278fc40a6750c23d2f49fbf44ed64c5f07f066e041
- MD5 7b7e273ddbd99abc8a23b0007ecb462f
- SHA1 25e6b509b13de674e8a6927c86f9293c840cd02c
- SHA512 f04ff4b7e8abcd8de050b16e101dd4529163f00cd7049df33493a099cd41708a4ca85a8d3c3fbb3ce7d29137b247c40a49e0164887bf42e521f05b3438fa37cc
- SSDEEP 6144:gVdvczEb7GUOpYWhNVynE/mF7XpvJAIByF71RkvhX3c+phUulqHg:gZLolhNVyEWpvJAIByF71ReVc+pjlqHg
- TLSH T18794DF2472C1C036E19701354BF6DB36153A7DB15B6164CBB7983B7E2EB02D0AA7631B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_7b7e273ddbd99abc8a23b0007ecb462f_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_7b7e273ddbd99abc8a23b0007ecb462f_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260706-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_7b7e273ddbd99abc8a23b0007ecb462f_elex_mafia_stealc_tofsee
- Size 413KB
- SHA256 01b13d6788cc77b57c5af8278fc40a6750c23d2f49fbf44ed64c5f07f066e041
- MD5 7b7e273ddbd99abc8a23b0007ecb462f
- SHA1 25e6b509b13de674e8a6927c86f9293c840cd02c
- SHA512 f04ff4b7e8abcd8de050b16e101dd4529163f00cd7049df33493a099cd41708a4ca85a8d3c3fbb3ce7d29137b247c40a49e0164887bf42e521f05b3438fa37cc
- SSDEEP 6144:gVdvczEb7GUOpYWhNVynE/mF7XpvJAIByF71RkvhX3c+phUulqHg:gZLolhNVyEWpvJAIByF71ReVc+pjlqHg
- TLSH T18794DF2472C1C036E19701354BF6DB36153A7DB15B6164CBB7983B7E2EB02D0AA7631B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Deletes itself
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.