2026-07-24_0f810c6061696842f2a45c7d1a10c6b5_elex_mafia_stealc_tofsee

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-24_0f810c6061696842f2a45c7d1a10c6b5_elex_mafia_stealc_tofsee
Size 476KB
Sample260724-z7adzstdjf
SHA256 a45ff0a5bf7702bb4512ff8b3d2e5a8ac648a955e71f5566091eca25db1bc4f6
MD5 0f810c6061696842f2a45c7d1a10c6b5
SHA1 f6bd7b33bfdad7158c86d404c254e196134329e2
SHA512 a9b80d6153fdd7b0b6b084b48dc06969a109a1a88ff73c7a8c84ff4c85bbb574ad9b9ab996743c411f0206f7ef69affcf6652dc2beeb783e8ebce56c98dcb016
SSDEEP 12288:aO4rfItL8HRJ0lCmNl8Pmb4E/47K9wlsDpVFd:aO4rQtGRubMmQ+9wlsDpVFd
TLSH
T1F2A4F1357285C233D29201710FE69BEAB63E75B45726A4C337D8026E1F65AE1E33634A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-24_0f810c6061696842f2a45c7d1a10c6b5_elex_mafia_stealc_tofsee

File Explorer

2026-07-24_0f810c6061696842f2a45c7d1a10c6b5_elex_mafia_stealc_tofsee

.exe 476KB

2026-07-24_0f810c6061696842f2a45c7d1a10c6b5_elex_mafia_stealc_tofsee

SHA256 a45ff0a5bf7702bb4512ff8b3d2e5a8ac648a955e71f5566091eca25db1bc4f6
MD5 0f810c6061696842f2a45c7d1a10c6b5
SHA1 f6bd7b33bfdad7158c86d404c254e196134329e2
SHA512 a9b80d6153fdd7b0b6b084b48dc06969a109a1a88ff73c7a8c84ff4c85bbb574ad9b9ab996743c411f0206f7ef69affcf6652dc2beeb783e8ebce56c98dcb016
SSDEEP 12288:aO4rfItL8HRJ0lCmNl8Pmb4E/47K9wlsDpVFd:aO4rQtGRubMmQ+9wlsDpVFd
TLSH
T1F2A4F1357285C233D29201710FE69BEAB63E75B45726A4C337D8026E1F65AE1E33634A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

67250

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.reloc

Size

133KB

Virtual Size

132KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

24KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

257KB

Virtual Size

278KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.text

Size

3KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.text

Size

6KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

7KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-24_0f810c6061696842f2a45c7d1a10c6b5_elex_mafia_stealc_tofsee

generic