General
- Target 2025-05-27_596cb2e76a9478630cf28e4817155145_elex_stealc_stop_tofsee_upatre
- Size 600KB
- Sample250527-hya6gszwht
- SHA256 26c47e02ad9b4e113f6bd2f6f1aa58f4314da8eae41ce78879265e0019ff4762
- MD5 596cb2e76a9478630cf28e4817155145
- SHA1 82a698b71d60b5db45a724ca82e8677afd21416f
- SHA512 4956ce42318db9618a4f749a2bbf94312d8f525740644d7a9c20b1f4730a5a738dc3f2a9c54207f14c62a363f3e0dd32f5bd27fee441227b924e11236a48f9f6
- SSDEEP 12288:GAfE+BTw4yzTaS/sgeaHd6MY4f6U8BqW+v/vhP3DV:pynTTBd6OC6v/vhPTV
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2025-05-27_596cb2e76a9478630cf28e4817155145_elex_stealc_stop_tofsee_upatre.exe
Resource
win10v2004-20250502-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2025-05-27_596cb2e76a9478630cf28e4817155145_elex_stealc_stop_tofsee_upatre.exe
Resource
win11-20250502-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2025-05-27_596cb2e76a9478630cf28e4817155145_elex_stealc_stop_tofsee_upatre
- Size 600KB
- SHA256 26c47e02ad9b4e113f6bd2f6f1aa58f4314da8eae41ce78879265e0019ff4762
- MD5 596cb2e76a9478630cf28e4817155145
- SHA1 82a698b71d60b5db45a724ca82e8677afd21416f
- SHA512 4956ce42318db9618a4f749a2bbf94312d8f525740644d7a9c20b1f4730a5a738dc3f2a9c54207f14c62a363f3e0dd32f5bd27fee441227b924e11236a48f9f6
- SSDEEP 12288:GAfE+BTw4yzTaS/sgeaHd6MY4f6U8BqW+v/vhP3DV:pynTTBd6OC6v/vhPTV
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Upatre family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE