2026-07-15_881fc6a3f31589adf8ebb9e033dca9a6_elex_mafia_stealc_tofsee

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-15_881fc6a3f31589adf8ebb9e033dca9a6_elex_mafia_stealc_tofsee
Size 479KB
Sample260715-e9zrfaew9s
SHA256 a87665eb2a00eac7d58e228cfe449d538a42103ab2e6dfe5243690460317912f
MD5 881fc6a3f31589adf8ebb9e033dca9a6
SHA1 2cc61d8c4c4ee18ce8958580ee31761f3d29334b
SHA512 f12775dcf037365d3cac40b75cb924f9e368fadb0a511a1815bfc7854f582549bc7418e20a4ca367539fe4b8d1fe4812aaccc7d650e72da8dfa678b5f431805d
SSDEEP 6144:b9EyS4oMxIkjxcWqHtg88HARRJ7bbB5Kgm/rv7+dDokLCoHQFu6XHlWgzvw675UO:bO4rfItL8HAxdaTooCacALI675UO
TLSH
T1CBA4F1267280C133E2E302714BE6DAA6BA3E75701726A4C73BD8466D1F657E1D33634B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-15_881fc6a3f31589adf8ebb9e033dca9a6_elex_mafia_stealc_tofsee

File Explorer

2026-07-15_881fc6a3f31589adf8ebb9e033dca9a6_elex_mafia_stealc_tofsee

.exe 479KB

2026-07-15_881fc6a3f31589adf8ebb9e033dca9a6_elex_mafia_stealc_tofsee

SHA256 a87665eb2a00eac7d58e228cfe449d538a42103ab2e6dfe5243690460317912f
MD5 881fc6a3f31589adf8ebb9e033dca9a6
SHA1 2cc61d8c4c4ee18ce8958580ee31761f3d29334b
SHA512 f12775dcf037365d3cac40b75cb924f9e368fadb0a511a1815bfc7854f582549bc7418e20a4ca367539fe4b8d1fe4812aaccc7d650e72da8dfa678b5f431805d
SSDEEP 6144:b9EyS4oMxIkjxcWqHtg88HARRJ7bbB5Kgm/rv7+dDokLCoHQFu6XHlWgzvw675UO:bO4rfItL8HAxdaTooCacALI675UO
TLSH
T1CBA4F1267280C133E2E302714BE6DAA6BA3E75701726A4C73BD8466D1F657E1D33634B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

67250

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

133KB

Virtual Size

132KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

24KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

257KB

Virtual Size

278KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

2KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

9KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

6KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-15_881fc6a3f31589adf8ebb9e033dca9a6_elex_mafia_stealc_tofsee

generic