General
- Target 2026-02-28_40d72aa9d36cac2af5baeb948a7e15a7_elex_stealc_stop_tofsee_upatre
- Size 601KB
- Sample260228-me9bdsay9b
- SHA256 eb4b7bd0faa650be6fef25dc240ca3e36797eb9ec96d89a858a8af281b816285
- MD5 40d72aa9d36cac2af5baeb948a7e15a7
- SHA1 394475af15869da674eb54af67b9375e17d05dc6
- SHA512 bcd8348b7cb1b5a89926c060583df8bba850e98fe47fc3c45a564668c324cd49a0737b227b40cd783797fe5f97c429335f3a9844a0e2860e0d6e45cce4ff6b3a
- SSDEEP 12288:GAfE+BTw4yzTaS/sgeaHd6MY4f6U8BqW+v/vhP3Dx:pynTTBd6OC6v/vhPTx
- TLSH T1BAD4AF3133E18532E1A72FB119F5833A9939BD212B32C6CF63A4B91D5E702D2D972356
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-02-28_40d72aa9d36cac2af5baeb948a7e15a7_elex_stealc_stop_tofsee_upatre.exe
Resource
win10v2004-20260129-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-02-28_40d72aa9d36cac2af5baeb948a7e15a7_elex_stealc_stop_tofsee_upatre.exe
Resource
win11-20260130-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-02-28_40d72aa9d36cac2af5baeb948a7e15a7_elex_stealc_stop_tofsee_upatre
- Size 601KB
- SHA256 eb4b7bd0faa650be6fef25dc240ca3e36797eb9ec96d89a858a8af281b816285
- MD5 40d72aa9d36cac2af5baeb948a7e15a7
- SHA1 394475af15869da674eb54af67b9375e17d05dc6
- SHA512 bcd8348b7cb1b5a89926c060583df8bba850e98fe47fc3c45a564668c324cd49a0737b227b40cd783797fe5f97c429335f3a9844a0e2860e0d6e45cce4ff6b3a
- SSDEEP 12288:GAfE+BTw4yzTaS/sgeaHd6MY4f6U8BqW+v/vhP3Dx:pynTTBd6OC6v/vhPTx
- TLSH T1BAD4AF3133E18532E1A72FB119F5833A9939BD212B32C6CF63A4B91D5E702D2D972356
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Upatre family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE