2026-08-15_072662abd2f33fc244d70acc4dab04f9_elex_mafia_stealc_tofsee

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-15_072662abd2f33fc244d70acc4dab04f9_elex_mafia_stealc_tofsee
Size 505KB
Sample260815-npsbaswva1
SHA256 531e231ddb3edfa04e5bf78b3101ae8f0f94da57aae1a5e9022712365f2d5b44
MD5 072662abd2f33fc244d70acc4dab04f9
SHA1 500977785aac3b8b1e59757bdad5a6aa5f9dc214
SHA512 f16afcd3d2a083e4490d0994c3644058c33dab222a91b4c8d7187776d5de82ef2441d00962d9312806cb801843e620fa727ff62170d71c8700385acff97108d3
SSDEEP 12288:NU5rCOTeijhCdHFn85Fd6I5KjCT/nZReFs4XgnLTZwlH:NUQOJjodHu6I5Qkn1LTSlH
TLSH
T17EB4F1267285C133E69202710EE6EBA26D3B7C71572664C33B94677E2EB13D0A779343
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-15_072662abd2f33fc244d70acc4dab04f9_elex_mafia_stealc_tofsee

File Explorer

2026-08-15_072662abd2f33fc244d70acc4dab04f9_elex_mafia_stealc_tofsee

.exe 505KB

2026-08-15_072662abd2f33fc244d70acc4dab04f9_elex_mafia_stealc_tofsee

SHA256 531e231ddb3edfa04e5bf78b3101ae8f0f94da57aae1a5e9022712365f2d5b44
MD5 072662abd2f33fc244d70acc4dab04f9
SHA1 500977785aac3b8b1e59757bdad5a6aa5f9dc214
SHA512 f16afcd3d2a083e4490d0994c3644058c33dab222a91b4c8d7187776d5de82ef2441d00962d9312806cb801843e620fa727ff62170d71c8700385acff97108d3
SSDEEP 12288:NU5rCOTeijhCdHFn85Fd6I5KjCT/nZReFs4XgnLTZwlH:NUQOJjodHu6I5Qkn1LTSlH
TLSH
T17EB4F1267285C133E69202710EE6EBA26D3B7C71572664C33B94677E2EB13D0A779343
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

70582

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

137KB

Virtual Size

136KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

24KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

262KB

Virtual Size

283KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

50KB

Virtual Size

50KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

11KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.text

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

9KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.text

Size

1KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-15_072662abd2f33fc244d70acc4dab04f9_elex_mafia_stealc_tofsee

generic