General
- Target 2026-07-04_7d2c9aa455ef82b8c993dab7b59c068e_elex_glassworm_rhadamanthys_stealc_stop
- Size 3.9MB
- Sample260704-1r91caev4z
- SHA256 0f7bc4184358f91d561218a89c57411307476ccd3cf64d09993630ffc9129ace
- MD5 7d2c9aa455ef82b8c993dab7b59c068e
- SHA1 6d43088817090746cfde9748ce8b07af695e6bab
- SHA512 c813e688391d401321f5b99f8dc56083b57ef121a4407b6ddd9f22409a51806fcd898f8c2ad112e9f8a9a512ebefe0f3bb3270612950d3c74a293588d4fb1409
- SSDEEP 98304:N/NC5jnLrHp/qKm2/Sb/gqAZj+UzKb3HtFO:NMvrRb/G8+HO
- TLSH T1BB168B13EBC14AE9F38D05365B548140D72AEE21AA4F1351346C326DDFA73878F66A3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-04_7d2c9aa455ef82b8c993dab7b59c068e_elex_glassworm_rhadamanthys_stealc_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-07-04_7d2c9aa455ef82b8c993dab7b59c068e_elex_glassworm_rhadamanthys_stealc_stop
- Size 3.9MB
- SHA256 0f7bc4184358f91d561218a89c57411307476ccd3cf64d09993630ffc9129ace
- MD5 7d2c9aa455ef82b8c993dab7b59c068e
- SHA1 6d43088817090746cfde9748ce8b07af695e6bab
- SHA512 c813e688391d401321f5b99f8dc56083b57ef121a4407b6ddd9f22409a51806fcd898f8c2ad112e9f8a9a512ebefe0f3bb3270612950d3c74a293588d4fb1409
- SSDEEP 98304:N/NC5jnLrHp/qKm2/Sb/gqAZj+UzKb3HtFO:NMvrRb/G8+HO
- TLSH T1BB168B13EBC14AE9F38D05365B548140D72AEE21AA4F1351346C326DDFA73878F66A3E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE