2026-08-14_81a34b69163b3ae2d891dbac0f2d323a_elex_mafia_stealc_tofsee

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-14_81a34b69163b3ae2d891dbac0f2d323a_elex_mafia_stealc_tofsee
Size 505KB
Sample260814-ejnw9atzes
SHA256 b33a5105a9f01aff830929eee6baf46111ed8294d11d481e21e29aa63048b1dc
MD5 81a34b69163b3ae2d891dbac0f2d323a
SHA1 480d5394797f058160f62c146058bbc52732dfc1
SHA512 90333505ecbcf01b3128d9ba54044f8efddafb519287be88a6ab7b31c1f02366bacc7a7c25eced5057b52f5c7dde24f0614ed75fc9f85e95bc86b3393e382457
SSDEEP 12288:NU5rCOTeijDyo1OA2xMsY9jRDBK4yQ5WseG/TZwlH:NUQOJjuoQA2xsjzKQ5deG/TSlH
TLSH
T189B4F125B685C532E5D202710FEADBA22A3FBC35972254C72BD4A62E2F712E1D371347
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-14_81a34b69163b3ae2d891dbac0f2d323a_elex_mafia_stealc_tofsee

File Explorer

2026-08-14_81a34b69163b3ae2d891dbac0f2d323a_elex_mafia_stealc_tofsee

.exe 505KB

2026-08-14_81a34b69163b3ae2d891dbac0f2d323a_elex_mafia_stealc_tofsee

SHA256 b33a5105a9f01aff830929eee6baf46111ed8294d11d481e21e29aa63048b1dc
MD5 81a34b69163b3ae2d891dbac0f2d323a
SHA1 480d5394797f058160f62c146058bbc52732dfc1
SHA512 90333505ecbcf01b3128d9ba54044f8efddafb519287be88a6ab7b31c1f02366bacc7a7c25eced5057b52f5c7dde24f0614ed75fc9f85e95bc86b3393e382457
SSDEEP 12288:NU5rCOTeijDyo1OA2xMsY9jRDBK4yQ5WseG/TZwlH:NUQOJjuoQA2xsjzKQ5deG/TSlH
TLSH
T189B4F125B685C532E5D202710FEADBA22A3FBC35972254C72BD4A62E2F712E1D371347
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

70582

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

137KB

Virtual Size

136KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

24KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

262KB

Virtual Size

283KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

50KB

Virtual Size

50KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

11KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.text

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

9KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.text

Size

1KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-14_81a34b69163b3ae2d891dbac0f2d323a_elex_mafia_stealc_tofsee

generic