2026-08-10_1d9835382e296f7f52043f486347cbc1_elex_mafia_stealc_tofsee

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-10_1d9835382e296f7f52043f486347cbc1_elex_mafia_stealc_tofsee
Size 505KB
Sample260810-v5tydshe84
SHA256 bf5caaf30a3b79ef9da48d67a5e5665ee29c563403edf2c694abdae0fd3fb28b
MD5 1d9835382e296f7f52043f486347cbc1
SHA1 2987195b28db2eb0f21c7572032680dbb1277552
SHA512 273e3a4aebd969c746715f9932de874dffcb9b8f381b5b7ccecef9311e623564e3c48c9579bc820ed9803d8f4e45b3e3951b8e702f1b85cadaa55af154a494d4
SSDEEP 12288:NU5rCOTeijciSAa1MwV0eAIVuG3rItdMTZwlH:NUQOJjTUVEIR3EtdMTSlH
TLSH
T124B4F1257181C132E6D212714EE6EBB2693ABD754726A4C33B84627E2FB17E1E335307
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-10_1d9835382e296f7f52043f486347cbc1_elex_mafia_stealc_tofsee

File Explorer

2026-08-10_1d9835382e296f7f52043f486347cbc1_elex_mafia_stealc_tofsee

.exe 505KB

2026-08-10_1d9835382e296f7f52043f486347cbc1_elex_mafia_stealc_tofsee

SHA256 bf5caaf30a3b79ef9da48d67a5e5665ee29c563403edf2c694abdae0fd3fb28b
MD5 1d9835382e296f7f52043f486347cbc1
SHA1 2987195b28db2eb0f21c7572032680dbb1277552
SHA512 273e3a4aebd969c746715f9932de874dffcb9b8f381b5b7ccecef9311e623564e3c48c9579bc820ed9803d8f4e45b3e3951b8e702f1b85cadaa55af154a494d4
SSDEEP 12288:NU5rCOTeijciSAa1MwV0eAIVuG3rItdMTZwlH:NUQOJjTUVEIR3EtdMTSlH
TLSH
T124B4F1257181C132E6D212714EE6EBB2693ABD754726A4C33B84627E2FB17E1E335307
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

70582

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

137KB

Virtual Size

136KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

24KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

262KB

Virtual Size

283KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

50KB

Virtual Size

50KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

11KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.text

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

9KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.text

Size

1KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-10_1d9835382e296f7f52043f486347cbc1_elex_mafia_stealc_tofsee

generic