General
- Target 2026-07-09_24b5b38a71dbc6c0dbeabd69c70a3512_elex_mafia_stealc_tofsee
- Size 652KB
- Sample260709-whhsaae16p
- SHA256 5e0280786d1a69c33b2c7fa47f81c6b470833c6a8238d6c592b091b00e69bc34
- MD5 24b5b38a71dbc6c0dbeabd69c70a3512
- SHA1 3527f30e0dd4d9730b59b1bd2d3cc2c899cfe0ff
- SHA512 52627d5886b82fb8c74063f3dddf848c40360622ee2e3b7a9ecfa528cdf4f8e312bb784e645bfdf8e60356f77675692e5186f31638f398d637f7d7ca597ae017
- SSDEEP 12288:wU5rCOTeiDJ1SSktlZahAaGlVUNZ+3/v+I9hUG2VA:wUQOJDLthU0NGEA
- TLSH T1E5E4D02173D8C532E5FB037859B5E6614D7EBD32A722D2CF2B9016AE19B1BD08631723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_24b5b38a71dbc6c0dbeabd69c70a3512_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_24b5b38a71dbc6c0dbeabd69c70a3512_elex_mafia_stealc_tofsee.exe
Resource
win11ltsc2024-20260706-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_24b5b38a71dbc6c0dbeabd69c70a3512_elex_mafia_stealc_tofsee
- Size 652KB
- SHA256 5e0280786d1a69c33b2c7fa47f81c6b470833c6a8238d6c592b091b00e69bc34
- MD5 24b5b38a71dbc6c0dbeabd69c70a3512
- SHA1 3527f30e0dd4d9730b59b1bd2d3cc2c899cfe0ff
- SHA512 52627d5886b82fb8c74063f3dddf848c40360622ee2e3b7a9ecfa528cdf4f8e312bb784e645bfdf8e60356f77675692e5186f31638f398d637f7d7ca597ae017
- SSDEEP 12288:wU5rCOTeiDJ1SSktlZahAaGlVUNZ+3/v+I9hUG2VA:wUQOJDLthU0NGEA
- TLSH T1E5E4D02173D8C532E5FB037859B5E6614D7EBD32A722D2CF2B9016AE19B1BD08631723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.