2026-08-02_f96a1e8ba9cf78ed7270ccb894c14d42_elex_mafia_stealc_tofsee

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-02_f96a1e8ba9cf78ed7270ccb894c14d42_elex_mafia_stealc_tofsee
Size 531KB
Sample260802-f2nvmsdf22
SHA256 e3b525aeec3fa85da138e3ef1b4de8906ec5beef0aeca24fd53fa6348a8ba2ec
MD5 f96a1e8ba9cf78ed7270ccb894c14d42
SHA1 94d34329c3fb10304014ffa181fa8140baf124e1
SHA512 e025af73b227f48218ce1aa4cb89168202c13feb0d05f43b6c92835f0c705d96ec253cbc69c6e95a11017f8ab0cf003eb3d5f88c5a27a6d4315d1c14698e8af7
SSDEEP 12288:gZLolhNVyzot25XGcctbcOXq7qNazzb4Dn4LcmT4nNBb:gZqhOzot254hcOXczzb4Dn4LcmT4nNBb
TLSH
T11CC4D12AB3818232C18302711B6BD7E6763E7D75137694D37698612D1B72BE0A37B34B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-02_f96a1e8ba9cf78ed7270ccb894c14d42_elex_mafia_stealc_tofsee

File Explorer

2026-08-02_f96a1e8ba9cf78ed7270ccb894c14d42_elex_mafia_stealc_tofsee

.exe 531KB

2026-08-02_f96a1e8ba9cf78ed7270ccb894c14d42_elex_mafia_stealc_tofsee

SHA256 e3b525aeec3fa85da138e3ef1b4de8906ec5beef0aeca24fd53fa6348a8ba2ec
MD5 f96a1e8ba9cf78ed7270ccb894c14d42
SHA1 94d34329c3fb10304014ffa181fa8140baf124e1
SHA512 e025af73b227f48218ce1aa4cb89168202c13feb0d05f43b6c92835f0c705d96ec253cbc69c6e95a11017f8ab0cf003eb3d5f88c5a27a6d4315d1c14698e8af7
SSDEEP 12288:gZLolhNVyzot25XGcctbcOXq7qNazzb4Dn4LcmT4nNBb:gZqhOzot254hcOXczzb4Dn4LcmT4nNBb
TLSH
T11CC4D12AB3818232C18302711B6BD7E6763E7D75137694D37698612D1B72BE0A37B34B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

70614

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

141KB

Virtual Size

140KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

24KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

184KB

Virtual Size

206KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

49KB

Virtual Size

49KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.text

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rdata

Size

5KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

4KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.pdata

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.text

Size

2KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.text

Size

6KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

7KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-02_f96a1e8ba9cf78ed7270ccb894c14d42_elex_mafia_stealc_tofsee

generic