2026-08-02_965c6f442a824141681fae610f18ae62_elex_mafia_stealc_tofsee

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-02_965c6f442a824141681fae610f18ae62_elex_mafia_stealc_tofsee
Size 505KB
Sample260802-rbed3aba69
SHA256 d1df33228944ca4f6a833bfb00bc6a3e2e78154b0d5a59cd38b463dd5fbc8d7d
MD5 965c6f442a824141681fae610f18ae62
SHA1 3d146bcf86ea60023d1e0669ebcde451d90d6ea5
SHA512 f17974f54716a708622e3ee004a0d85c8be6a2bb27f058967707acf24f5cbbcfd1b18fe2d43ad40b868ab0791f945242ed9ff6f08f554fa9b3cd15e88a1bce78
SSDEEP 12288:NU5rCOTeijZ9vc6FwZNA/fGNEDtuCvClpoTZwlH:NUQOJjvvc6cNAmqpuGTSlH
TLSH
T1F6B4F125B644C032E5D302720BE6DBB26A3A7C355322A4C73B94777E2EB16E1A735347
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-02_965c6f442a824141681fae610f18ae62_elex_mafia_stealc_tofsee

File Explorer

2026-08-02_965c6f442a824141681fae610f18ae62_elex_mafia_stealc_tofsee

.exe 505KB

2026-08-02_965c6f442a824141681fae610f18ae62_elex_mafia_stealc_tofsee

SHA256 d1df33228944ca4f6a833bfb00bc6a3e2e78154b0d5a59cd38b463dd5fbc8d7d
MD5 965c6f442a824141681fae610f18ae62
SHA1 3d146bcf86ea60023d1e0669ebcde451d90d6ea5
SHA512 f17974f54716a708622e3ee004a0d85c8be6a2bb27f058967707acf24f5cbbcfd1b18fe2d43ad40b868ab0791f945242ed9ff6f08f554fa9b3cd15e88a1bce78
SSDEEP 12288:NU5rCOTeijZ9vc6FwZNA/fGNEDtuCvClpoTZwlH:NUQOJjvvc6cNAmqpuGTSlH
TLSH
T1F6B4F125B644C032E5D302720BE6DBB26A3A7C355322A4C73B94777E2EB16E1A735347
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

70582

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

137KB

Virtual Size

136KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

24KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

262KB

Virtual Size

283KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

50KB

Virtual Size

50KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

11KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.text

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

9KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.text

Size

1KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-02_965c6f442a824141681fae610f18ae62_elex_mafia_stealc_tofsee

generic