General
- Target 2025-12-16_e46b2400baa7e84899b4637dc887882a_elex_stealc_stop_tofsee_upatre
- Size 600KB
- Sample251216-tah2za1rap
- SHA256 c97a1b5699e153d7aec4ebedfcc3dd82818af8274e0a444866cdcec7090454d7
- MD5 e46b2400baa7e84899b4637dc887882a
- SHA1 99f3492a76df8e33d9a312ae43f435b0c2198867
- SHA512 10e9e41bcb98b1286745c272db2715ac3dfec6c965333b8f19864a28ed1713bc7ead67298812fc98fe8bbacfdfe13091f236115efbad3805f5b5198857ed2014
- SSDEEP 12288:GAfE+BTw4yzTaS/sgeaHd6MY4f6U8BqW+v/vhP3DM:pynTTBd6OC6v/vhPTM
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2025-12-16_e46b2400baa7e84899b4637dc887882a_elex_stealc_stop_tofsee_upatre.exe
Resource
win10v2004-20251016-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2025-12-16_e46b2400baa7e84899b4637dc887882a_elex_stealc_stop_tofsee_upatre.exe
Resource
win11-20251015-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2025-12-16_e46b2400baa7e84899b4637dc887882a_elex_stealc_stop_tofsee_upatre
- Size 600KB
- SHA256 c97a1b5699e153d7aec4ebedfcc3dd82818af8274e0a444866cdcec7090454d7
- MD5 e46b2400baa7e84899b4637dc887882a
- SHA1 99f3492a76df8e33d9a312ae43f435b0c2198867
- SHA512 10e9e41bcb98b1286745c272db2715ac3dfec6c965333b8f19864a28ed1713bc7ead67298812fc98fe8bbacfdfe13091f236115efbad3805f5b5198857ed2014
- SSDEEP 12288:GAfE+BTw4yzTaS/sgeaHd6MY4f6U8BqW+v/vhP3DM:pynTTBd6OC6v/vhPTM
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Upatre family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE