2026-07-28_ed8822c4121b9adf34a1c8cc10a1efcc_elex_mafia_stealc_tofsee

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-28_ed8822c4121b9adf34a1c8cc10a1efcc_elex_mafia_stealc_tofsee
Size 486KB
Sample260729-ae5a8acf79
SHA256 86e770ec55f665d404c0729482b394da09ec037d8e01706d4e9a3e2ced4d1dc8
MD5 ed8822c4121b9adf34a1c8cc10a1efcc
SHA1 0a2551b4e01ee72d9149f1da386943beb4fa3037
SHA512 59bf395e71e61f8f7130dbc731f1f1f736f1ad250e4b3f8ca38aa99ff94d0da6b06f1f9665a119790cb5ab25c2677526834f873b8fa10f5722c82ef1d0f7c2c3
SSDEEP 12288:3O4rfItL8HP6b1oQU3bxFgLUdJUG8ReWlOWUlN7blx26im7rKxUYXhW:3O4rQtGPW1oQubxFXJT8QyOWUntdN3KQ
TLSH
T187B4F12A76818233D29303751BE6DAD6BA3E75B1036694C33BD4427D1E61BE1E33A347
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-28_ed8822c4121b9adf34a1c8cc10a1efcc_elex_mafia_stealc_tofsee

File Explorer

2026-07-28_ed8822c4121b9adf34a1c8cc10a1efcc_elex_mafia_stealc_tofsee

.exe 486KB

2026-07-28_ed8822c4121b9adf34a1c8cc10a1efcc_elex_mafia_stealc_tofsee

SHA256 86e770ec55f665d404c0729482b394da09ec037d8e01706d4e9a3e2ced4d1dc8
MD5 ed8822c4121b9adf34a1c8cc10a1efcc
SHA1 0a2551b4e01ee72d9149f1da386943beb4fa3037
SHA512 59bf395e71e61f8f7130dbc731f1f1f736f1ad250e4b3f8ca38aa99ff94d0da6b06f1f9665a119790cb5ab25c2677526834f873b8fa10f5722c82ef1d0f7c2c3
SSDEEP 12288:3O4rfItL8HP6b1oQU3bxFgLUdJUG8ReWlOWUlN7blx26im7rKxUYXhW:3O4rQtGPW1oQubxFXJT8QyOWUntdN3KQ
TLSH
T187B4F12A76818233D29303751BE6DAD6BA3E75B1036694C33BD4427D1E61BE1E33A347
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

67250

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.reloc

Size

133KB

Virtual Size

132KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

24KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

257KB

Virtual Size

278KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.giats

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.text

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

1024B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

6KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-28_ed8822c4121b9adf34a1c8cc10a1efcc_elex_mafia_stealc_tofsee

generic