2026-07-09_d532540b8b74127ff54db73718c93025_elex_mafia_stealc_tofsee

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-09_d532540b8b74127ff54db73718c93025_elex_mafia_stealc_tofsee
Size 505KB
Sample260709-tvc2fses71
SHA256 9271ccfde25e775221e9c6e883663561c3774d7d8e7c7bd9568157878397eb06
MD5 d532540b8b74127ff54db73718c93025
SHA1 ad2f72172341842ab060e3551d825383ac16a990
SHA512 a59ffa078533ef6374beb4114dffdd6dd31692c1cf3283e9dffb3bb3682030294f5576cdb07e7c68627d2e22cb44c55726c657b63f19e27c9323bc432d96c5e4
SSDEEP 12288:NU5rCOTeijNsVnDMfE/g3yXksCVQuRc8jXvvFo0TZwlH:NUQOJjatg3yX5QH+OTSlH
TLSH
T131B4F126B245C132E69302314AE2DBB2293B7D759726A4C33B94627E2FB13D1D379347
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-09_d532540b8b74127ff54db73718c93025_elex_mafia_stealc_tofsee

File Explorer

2026-07-09_d532540b8b74127ff54db73718c93025_elex_mafia_stealc_tofsee

.exe 505KB

2026-07-09_d532540b8b74127ff54db73718c93025_elex_mafia_stealc_tofsee

SHA256 9271ccfde25e775221e9c6e883663561c3774d7d8e7c7bd9568157878397eb06
MD5 d532540b8b74127ff54db73718c93025
SHA1 ad2f72172341842ab060e3551d825383ac16a990
SHA512 a59ffa078533ef6374beb4114dffdd6dd31692c1cf3283e9dffb3bb3682030294f5576cdb07e7c68627d2e22cb44c55726c657b63f19e27c9323bc432d96c5e4
SSDEEP 12288:NU5rCOTeijNsVnDMfE/g3yXksCVQuRc8jXvvFo0TZwlH:NUQOJjatg3yX5QH+OTSlH
TLSH
T131B4F126B245C132E69302314AE2DBB2293B7D759726A4C33B94627E2FB13D1D379347
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

70582

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

137KB

Virtual Size

136KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

24KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

262KB

Virtual Size

283KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

50KB

Virtual Size

50KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

11KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.text

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

9KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.text

Size

1KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-09_d532540b8b74127ff54db73718c93025_elex_mafia_stealc_tofsee

generic