General
- Target 2026-03-26_6fa1f17ee4b808f56beac77f8c35393e_elex_stealc_stop_tofsee_upatre
- Size 617KB
- Sample260326-c6c26ae18r
- SHA256 e65b55a5ea46ca8eac657161afb87e09db27deb85c0f8aaa04a7f2213fcd0516
- MD5 6fa1f17ee4b808f56beac77f8c35393e
- SHA1 639d1aae76312a7ddb1d714c50ab23c0b2dde4f6
- SHA512 08bd5f57bdbe3b1269972047b4b77adff065989e2d948e9ae4532bd58feaf4087337975abce8ce2ef04f0c9af336aaf1950529ddd7c0b0a35783241b55fa9763
- SSDEEP 12288:OFi+BTw4yzTaS/sgeaHd6MY4f6U8BqW+v/vhP3D7:iynTTBd6OC6v/vhPT7
- TLSH T12ED4AE3133E04532E1A71FB109F5826E9939BD222B22C9CF63B4F9194FB12D2E972755
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-03-26_6fa1f17ee4b808f56beac77f8c35393e_elex_stealc_stop_tofsee_upatre.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-03-26_6fa1f17ee4b808f56beac77f8c35393e_elex_stealc_stop_tofsee_upatre.exe
Resource
win11-20260130-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-03-26_6fa1f17ee4b808f56beac77f8c35393e_elex_stealc_stop_tofsee_upatre
- Size 617KB
- SHA256 e65b55a5ea46ca8eac657161afb87e09db27deb85c0f8aaa04a7f2213fcd0516
- MD5 6fa1f17ee4b808f56beac77f8c35393e
- SHA1 639d1aae76312a7ddb1d714c50ab23c0b2dde4f6
- SHA512 08bd5f57bdbe3b1269972047b4b77adff065989e2d948e9ae4532bd58feaf4087337975abce8ce2ef04f0c9af336aaf1950529ddd7c0b0a35783241b55fa9763
- SSDEEP 12288:OFi+BTw4yzTaS/sgeaHd6MY4f6U8BqW+v/vhP3D7:iynTTBd6OC6v/vhPT7
- TLSH T12ED4AE3133E04532E1A71FB109F5826E9939BD222B22C9CF63B4F9194FB12D2E972755
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Upatre family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE