2026-10-26_9a73040e4bd34512690bd2737734ed13_elex_mafia_stealc_tofsee

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-26_9a73040e4bd34512690bd2737734ed13_elex_mafia_stealc_tofsee
Size 505KB
Sample261027-m412badv2q
SHA256 494912fbc5f06fd745723251d99e7cdf1d67dfff914bf80bc00a9d7abd198455
MD5 9a73040e4bd34512690bd2737734ed13
SHA1 5e5559bc33439e050d6046caced6c0ddf90b218d
SHA512 dd98c8e3d472b8889551fcfbb73aa0234d8fbed79ec8696649e0a706d42e61550a02250f35b5b1f84995a1d8a17b6d8547a771023a72693aea636c0f6ec0f69b
SSDEEP 6144:oorf3lPvovsgZnqG2C7mOTeiL/DLl8WjkAf6iBYByySH7SgjbpyegecWxlVYtcgf:NU5rCOTeijjjZB1p7/jIeZJgspTZwlH
TLSH
T1C9B4F125B580C132E5D202710BE6EBB26A3B7C765726A4C737C4626E2BB53E2D335347
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-26_9a73040e4bd34512690bd2737734ed13_elex_mafia_stealc_tofsee

File Explorer

2026-10-26_9a73040e4bd34512690bd2737734ed13_elex_mafia_stealc_tofsee

.exe 505KB

2026-10-26_9a73040e4bd34512690bd2737734ed13_elex_mafia_stealc_tofsee

SHA256 494912fbc5f06fd745723251d99e7cdf1d67dfff914bf80bc00a9d7abd198455
MD5 9a73040e4bd34512690bd2737734ed13
SHA1 5e5559bc33439e050d6046caced6c0ddf90b218d
SHA512 dd98c8e3d472b8889551fcfbb73aa0234d8fbed79ec8696649e0a706d42e61550a02250f35b5b1f84995a1d8a17b6d8547a771023a72693aea636c0f6ec0f69b
SSDEEP 6144:oorf3lPvovsgZnqG2C7mOTeiL/DLl8WjkAf6iBYByySH7SgjbpyegecWxlVYtcgf:NU5rCOTeijjjZB1p7/jIeZJgspTZwlH
TLSH
T1C9B4F125B580C132E5D202710BE6EBB26A3B7C765726A4C737C4626E2BB53E2D335347
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

70582

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

137KB

Virtual Size

136KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

24KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

262KB

Virtual Size

283KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

50KB

Virtual Size

50KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

11KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.text

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

9KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.text

Size

1KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-26_9a73040e4bd34512690bd2737734ed13_elex_mafia_stealc_tofsee

generic