General
- Target 2025-12-06_5e8ecb0a8215d866e5a4964a99968a90_elex_stealc_stop_tofsee_upatre
- Size 600KB
- Sample251206-c6wt9sbr9t
- SHA256 dffb7c9353a6fde02a0cddaecdf0f10c5ca79f6cc1bd72f54c77a3e8c060a032
- MD5 5e8ecb0a8215d866e5a4964a99968a90
- SHA1 1d5048fb15425951970e2bf1396b82763921af04
- SHA512 34d7fade9ae28ac48dc81b3a739968487d5b3f1afe0a6513f82f5ace6b5ec033b0ab8567e9aa61c431cb356ed9410f1498ca7dd9f75d272b62006a7013db0d40
- SSDEEP 12288:GAfE+BTw4yzTaS/sgeaHd6MY4f6U8BqW+v/vhP3Dz:pynTTBd6OC6v/vhPTz
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2025-12-06_5e8ecb0a8215d866e5a4964a99968a90_elex_stealc_stop_tofsee_upatre.exe
Resource
win10v2004-20251016-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2025-12-06_5e8ecb0a8215d866e5a4964a99968a90_elex_stealc_stop_tofsee_upatre.exe
Resource
win11-20250619-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2025-12-06_5e8ecb0a8215d866e5a4964a99968a90_elex_stealc_stop_tofsee_upatre
- Size 600KB
- SHA256 dffb7c9353a6fde02a0cddaecdf0f10c5ca79f6cc1bd72f54c77a3e8c060a032
- MD5 5e8ecb0a8215d866e5a4964a99968a90
- SHA1 1d5048fb15425951970e2bf1396b82763921af04
- SHA512 34d7fade9ae28ac48dc81b3a739968487d5b3f1afe0a6513f82f5ace6b5ec033b0ab8567e9aa61c431cb356ed9410f1498ca7dd9f75d272b62006a7013db0d40
- SSDEEP 12288:GAfE+BTw4yzTaS/sgeaHd6MY4f6U8BqW+v/vhP3Dz:pynTTBd6OC6v/vhPTz
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Upatre family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE