2026-07-20_a90afc0d19b51bae8a5461506de9d980_elex_mafia_stealc_tofsee

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-20_a90afc0d19b51bae8a5461506de9d980_elex_mafia_stealc_tofsee
Size 505KB
Sample260720-k2aegae121
SHA256 cb1b2955ebe55d1971ed2f2f400ec78f85b667ce90bcd8215e89b8b77fb8beb6
MD5 a90afc0d19b51bae8a5461506de9d980
SHA1 7e094bcc36cfe34ea9eff2f922867274c6e21a96
SHA512 da0328c206ca0404f4b994c3c9c70a6b4e3a6912c46eb636909ccbd6714d9df42e91426536d23df4563bad790d2cf73fda149eae7c1740e163d69bac0321b877
SSDEEP 12288:NU5rCOTeijE3QEnGzEXvDce7k4/UTPOT/TZwlH:NUQOJjERnGzQvIe76bODTSlH
TLSH
T156B4F1367649C532E59202700BE6EBB26A3FBC35972654C33B84667E2FB12D1E375306
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-20_a90afc0d19b51bae8a5461506de9d980_elex_mafia_stealc_tofsee

File Explorer

2026-07-20_a90afc0d19b51bae8a5461506de9d980_elex_mafia_stealc_tofsee

.exe 505KB

2026-07-20_a90afc0d19b51bae8a5461506de9d980_elex_mafia_stealc_tofsee

SHA256 cb1b2955ebe55d1971ed2f2f400ec78f85b667ce90bcd8215e89b8b77fb8beb6
MD5 a90afc0d19b51bae8a5461506de9d980
SHA1 7e094bcc36cfe34ea9eff2f922867274c6e21a96
SHA512 da0328c206ca0404f4b994c3c9c70a6b4e3a6912c46eb636909ccbd6714d9df42e91426536d23df4563bad790d2cf73fda149eae7c1740e163d69bac0321b877
SSDEEP 12288:NU5rCOTeijE3QEnGzEXvDce7k4/UTPOT/TZwlH:NUQOJjERnGzQvIe76bODTSlH
TLSH
T156B4F1367649C532E59202700BE6EBB26A3FBC35972654C33B84667E2FB12D1E375306
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

70582

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

137KB

Virtual Size

136KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

24KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

262KB

Virtual Size

283KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

50KB

Virtual Size

50KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

11KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.text

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

9KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.text

Size

1KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-20_a90afc0d19b51bae8a5461506de9d980_elex_mafia_stealc_tofsee

generic