2026-07-23_17334eb6c1e43f2afd7a33a2fac7a08f_elex_mafia_stealc_tofsee

General

Target
2026-07-23_17334eb6c1e43f2afd7a33a2fac7a08f_elex_mafia_stealc_tofsee
Size 428KB
Sample260723-sr1snssajd
SHA256 b4bdc77e14f42c5536478f09585a459d47ee7f5162e41ff61c0ee0fd2d9e1bc4
MD5 17334eb6c1e43f2afd7a33a2fac7a08f
SHA1 a79acb9ee49ae0d4d308331945687101a7c735af
SHA512 c60c60860cd47485a1b0657fb05654174ed0131341c588dc21bdbfacbe2477a66ad2a702ebad075b6ac853022c8e1638a3bdd78fbe9acaf63de8541156a1beed
SSDEEP 6144:gVdvczEb7GUOpYWhNVynE/mFHml2RaDWn744KYNS2GlucDJyY4mgd5qHR:gZLolhNVyEqmMnNKSrGNgHmgrqHR
TLSH
T1DC94DF2476C0C036D19701314AF6DBB1193A7DB55F6264CBB7983B7E1EB02D0AA7A31B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-23_17334eb6c1e43f2afd7a33a2fac7a08f_elex_mafia_stealc_tofsee

File Explorer

2026-07-23_17334eb6c1e43f2afd7a33a2fac7a08f_elex_mafia_stealc_tofsee

.exe 428KB

2026-07-23_17334eb6c1e43f2afd7a33a2fac7a08f_elex_mafia_stealc_tofsee

IMPHASH 6dca3e9fb3928bbdb54dbce669943ec8
SHA256 b4bdc77e14f42c5536478f09585a459d47ee7f5162e41ff61c0ee0fd2d9e1bc4
MD5 17334eb6c1e43f2afd7a33a2fac7a08f
SHA1 a79acb9ee49ae0d4d308331945687101a7c735af
SHA512 c60c60860cd47485a1b0657fb05654174ed0131341c588dc21bdbfacbe2477a66ad2a702ebad075b6ac853022c8e1638a3bdd78fbe9acaf63de8541156a1beed
SSDEEP 6144:gVdvczEb7GUOpYWhNVynE/mFHml2RaDWn744KYNS2GlucDJyY4mgd5qHR:gZLolhNVyEqmMnNKSrGNgHmgrqHR
TLSH
T1DC94DF2476C0C036D19701314AF6DBB1193A7DB55F6264CBB7983B7E1EB02D0AA7A31B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

70614

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleW GetComputerNameW GetLocalTime SystemTimeToFileTime FileTimeToSystemTime SizeofResource LockResource LoadResource FindResourceW FindResourceExW MultiByteToWideChar GetProcAddress LoadLibraryW GetCurrentProcess LeaveCriticalSection EnterCriticalSection DeleteCriticalSection InitializeCriticalSection GetLastError CloseHandle WideCharToMultiByte MoveFileW DeleteFileW CreateDirectoryW SetFileAttributesW GetTempPathW GetTempFileNameW MoveFileExW lstrlenW CreateFileW GetFileSize ReadFile WriteFile Sleep GetComputerNameA GetModuleFileNameW CreateProcessW GetSystemTime FileTimeToLocalFileTime RaiseException InitializeCriticalSectionAndSpinCount HeapDestroy HeapAlloc HeapFree HeapReAlloc HeapSize GetProcessHeap LocalAlloc SetEndOfFile SetStdHandle WriteConsoleW FreeLibrary LoadLibraryA InterlockedIncrement InterlockedDecrement InterlockedExchange EncodePointer DecodePointer GetCommandLineW HeapSetInformation GetStartupInfoW GetCurrentThreadId RtlUnwind LCMapStringW GetCPInfo SetUnhandledExceptionFilter ExitProcess GetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime TerminateProcess UnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent GetConsoleCP GetConsoleMode GetACP GetOEMCP IsValidCodePage SetFilePointer FlushFileBuffers GetUserDefaultLCID GetLocaleInfoW GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeW

ole32

CoCreateInstance CoInitialize

shlwapi

PathIsRootW PathFileExistsW PathAppendW PathAddExtensionW PathRemoveExtensionW

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-23_17334eb6c1e43f2afd7a33a2fac7a08f_elex_mafia_stealc_tofsee

kernel32

ole32

shlwapi

generic