2026-08-17_3ecef128affaddf08ecdb9c3d2969696_elex_mafia_stealc_tofsee

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-17_3ecef128affaddf08ecdb9c3d2969696_elex_mafia_stealc_tofsee
Size 476KB
Sample260817-2datrs1bre
SHA256 f16afac39961aff70e3e784348b7e06518c45425e952a7067686142f2223a1a9
MD5 3ecef128affaddf08ecdb9c3d2969696
SHA1 2e2dd372a8e681f9fc47c8a8e10abbf08e620a7a
SHA512 6cc4cd8272f8ecca77b1d0c4c485185718ade4c062f8971dd049500535561a16a2eb4fb0db752b610fd12ca0da5922230744b31ddbf7be516522d6c1ea6fa52e
SSDEEP 12288:aO4rfItL8HRYiCdED2hoeLxg073v+EVPBtU5/Ucrq7K9wlsDpVFd:aO4rQtGRYiCdED2h3g07xVPAycrq+9wm
TLSH
T1D3A4F12A7781C133D29301751BE6CBA67B3E79B5073A94C33794026D2F61AE1D73A34A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-17_3ecef128affaddf08ecdb9c3d2969696_elex_mafia_stealc_tofsee

File Explorer

2026-08-17_3ecef128affaddf08ecdb9c3d2969696_elex_mafia_stealc_tofsee

.exe 476KB

2026-08-17_3ecef128affaddf08ecdb9c3d2969696_elex_mafia_stealc_tofsee

SHA256 f16afac39961aff70e3e784348b7e06518c45425e952a7067686142f2223a1a9
MD5 3ecef128affaddf08ecdb9c3d2969696
SHA1 2e2dd372a8e681f9fc47c8a8e10abbf08e620a7a
SHA512 6cc4cd8272f8ecca77b1d0c4c485185718ade4c062f8971dd049500535561a16a2eb4fb0db752b610fd12ca0da5922230744b31ddbf7be516522d6c1ea6fa52e
SSDEEP 12288:aO4rfItL8HRYiCdED2hoeLxg073v+EVPBtU5/Ucrq7K9wlsDpVFd:aO4rQtGRYiCdED2h3g07xVPAycrq+9wm
TLSH
T1D3A4F12A7781C133D29301751BE6CBA67B3E79B5073A94C33794026D2F61AE1D73A34A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

67250

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.reloc

Size

133KB

Virtual Size

132KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

24KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

257KB

Virtual Size

278KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.text

Size

3KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.text

Size

6KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

7KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-17_3ecef128affaddf08ecdb9c3d2969696_elex_mafia_stealc_tofsee

generic