2026-07-17_8002cd1f3305787171aae1209d793690_elex_mafia_stealc_tofsee

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-17_8002cd1f3305787171aae1209d793690_elex_mafia_stealc_tofsee
Size 468KB
Sample260717-xjs53sft3x
SHA256 b7f487f63e966428a5d3a08cde270b41956a7121e193dac0d6221de67685ef08
MD5 8002cd1f3305787171aae1209d793690
SHA1 32d012527e76610d20414c2056c3333d837b39f3
SHA512 399117f3b4ef4e2abb4f2be264bf8922ed353dec2056ffa40ba22102265444343481e61fbf5115e1371f40ecf6159d593b942fbcf4b6d3a0f8540009bb076cfa
SSDEEP 12288:qO4rfItL8HGFALPBioaOInKJotMJDUqjI2++xlT1o7bWmeEVGL:qO4rQtGGkpiop/otMZZUf+xlT1oumeEk
TLSH
T126A4E02A7641C133D29312741BEADBA6A63F79B00722A8D33BD4467D1E613D2D37634B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-17_8002cd1f3305787171aae1209d793690_elex_mafia_stealc_tofsee

File Explorer

2026-07-17_8002cd1f3305787171aae1209d793690_elex_mafia_stealc_tofsee

.exe 468KB

2026-07-17_8002cd1f3305787171aae1209d793690_elex_mafia_stealc_tofsee

SHA256 b7f487f63e966428a5d3a08cde270b41956a7121e193dac0d6221de67685ef08
MD5 8002cd1f3305787171aae1209d793690
SHA1 32d012527e76610d20414c2056c3333d837b39f3
SHA512 399117f3b4ef4e2abb4f2be264bf8922ed353dec2056ffa40ba22102265444343481e61fbf5115e1371f40ecf6159d593b942fbcf4b6d3a0f8540009bb076cfa
SSDEEP 12288:qO4rfItL8HGFALPBioaOInKJotMJDUqjI2++xlT1o7bWmeEVGL:qO4rQtGGkpiop/otMZZUf+xlT1oumeEk
TLSH
T126A4E02A7641C133D29312741BEADBA6A63F79B00722A8D33BD4467D1E613D2D37634B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

67250

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

133KB

Virtual Size

132KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.reloc

Size

24KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

257KB

Virtual Size

278KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.text

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

3KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1024B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-17_8002cd1f3305787171aae1209d793690_elex_mafia_stealc_tofsee

generic