2026-08-02_0fe937d1ab34f0a5b25701f3e2011692_elex_mafia_stealc_tofsee

General

Target
2026-08-02_0fe937d1ab34f0a5b25701f3e2011692_elex_mafia_stealc_tofsee
Size 524KB
Sample260802-r9f1jsbf44
SHA256 34234188e5df7f8081de241d3fa6ad00febda3a9205b550844371e8cc5518e06
MD5 0fe937d1ab34f0a5b25701f3e2011692
SHA1 a0761c7b5359a3aed62d12945a4fe19513372174
SHA512 5ccb9eea7ba7e52dab7ecbeb99a7b9caa53d8b7487b728a6c640e80e46fb17f572d0e01be6834bc5106809ae2f6607596c9d40fdc4e5fa3f18fe9aeff8e33659
SSDEEP 6144:Zorf3lPvovsgZnqG2C7mOTeiLGSDMzKQ7TwBrJno0BuK/f27RvZJ3+c8u3oJhkRq:wU5rCOTeiTFohKmOlu3o4T1UNZ
TLSH
T123B4F121B485C032F69206304EE6EBA2187F7D715B26A4C73B90677E6EB52D2D7B4307
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-02_0fe937d1ab34f0a5b25701f3e2011692_elex_mafia_stealc_tofsee

File Explorer

2026-08-02_0fe937d1ab34f0a5b25701f3e2011692_elex_mafia_stealc_tofsee

.exe 524KB

2026-08-02_0fe937d1ab34f0a5b25701f3e2011692_elex_mafia_stealc_tofsee

SHA256 34234188e5df7f8081de241d3fa6ad00febda3a9205b550844371e8cc5518e06
MD5 0fe937d1ab34f0a5b25701f3e2011692
SHA1 a0761c7b5359a3aed62d12945a4fe19513372174
SHA512 5ccb9eea7ba7e52dab7ecbeb99a7b9caa53d8b7487b728a6c640e80e46fb17f572d0e01be6834bc5106809ae2f6607596c9d40fdc4e5fa3f18fe9aeff8e33659
SSDEEP 6144:Zorf3lPvovsgZnqG2C7mOTeiLGSDMzKQ7TwBrJno0BuK/f27RvZJ3+c8u3oJhkRq:wU5rCOTeiTFohKmOlu3o4T1UNZ
TLSH
T123B4F121B485C032F69206304EE6EBA2187F7D715B26A4C73B90677E6EB52D2D7B4307
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

70582

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

137KB

Virtual Size

136KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

24KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

262KB

Virtual Size

283KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

50KB

Virtual Size

50KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

11KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-02_0fe937d1ab34f0a5b25701f3e2011692_elex_mafia_stealc_tofsee

generic