2026-07-23_cd0f652d4c65b29d231ed417025739ac_elex_mafia_stealc_tofsee

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-23_cd0f652d4c65b29d231ed417025739ac_elex_mafia_stealc_tofsee
Size 505KB
Sample260723-vxrhastcre
SHA256 691ecbf967888d7f2cb2e42211594d0505011a3483313a55c7ca8428e78d2f99
MD5 cd0f652d4c65b29d231ed417025739ac
SHA1 0fd82f19aab4e51d27134f63f61e3c726deeaba7
SHA512 1821b464bad0461ac93a4dd69ccce8ad2421406d40c065652575ac8500ee608703e6be727893d37d283aeba53aad3fd60835a60b304e50e574a82fa7be476c35
SSDEEP 6144:oorf3lPvovsgZnqG2C7mOTeiL/DLTUZtod2MEErqmcRlAfU5COAJGGeURR2q3MdI:NU5rCOTeijDUGd7ulRIiNBvHTZwlH
TLSH
T151B4F122B581C132E5D202710BE6EBA26B3B7C35472690C33B94A62E2FB57E1D775347
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-23_cd0f652d4c65b29d231ed417025739ac_elex_mafia_stealc_tofsee

File Explorer

2026-07-23_cd0f652d4c65b29d231ed417025739ac_elex_mafia_stealc_tofsee

.exe 505KB

2026-07-23_cd0f652d4c65b29d231ed417025739ac_elex_mafia_stealc_tofsee

SHA256 691ecbf967888d7f2cb2e42211594d0505011a3483313a55c7ca8428e78d2f99
MD5 cd0f652d4c65b29d231ed417025739ac
SHA1 0fd82f19aab4e51d27134f63f61e3c726deeaba7
SHA512 1821b464bad0461ac93a4dd69ccce8ad2421406d40c065652575ac8500ee608703e6be727893d37d283aeba53aad3fd60835a60b304e50e574a82fa7be476c35
SSDEEP 6144:oorf3lPvovsgZnqG2C7mOTeiL/DLTUZtod2MEErqmcRlAfU5COAJGGeURR2q3MdI:NU5rCOTeijDUGd7ulRIiNBvHTZwlH
TLSH
T151B4F122B581C132E5D202710BE6EBA26B3B7C35472690C33B94A62E2FB57E1D775347
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

70582

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

137KB

Virtual Size

136KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

24KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

262KB

Virtual Size

283KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

50KB

Virtual Size

50KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

11KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.text

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

9KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.text

Size

1KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-23_cd0f652d4c65b29d231ed417025739ac_elex_mafia_stealc_tofsee

generic