General
- Target 2026-07-15_409bc73a4922cd61a1fbd3f351c1d971_elex_glassworm_rhadamanthys_stealc_stop
- Size 3.9MB
- Sample260715-majvyac16v
- SHA256 686ad3ac1dfbd8f7afa8ceeaacff4696c29d2991b7708baa01d535a382c9f205
- MD5 409bc73a4922cd61a1fbd3f351c1d971
- SHA1 6109526a26f4b2f2bb7428495df52aca4f1f0ec6
- SHA512 7247271c25ffb8893f1ac68bdd4fc650add14e6e7a7e9d91ac305de8d16925f739a26f7aea504af36fa7beb10351c7a79a9a39f9c7fcd744cbc435a6e1cdfc33
- SSDEEP 98304:N/NC5jnLrHp/qKm2/Sb/gqAZj+UzKb3HtF3:NMvrRb/G8+H3
- TLSH T158168B13EBC14AE9F38D05365B548140D72AEE21AA4F1351346C326DDFA73878F66A3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-15_409bc73a4922cd61a1fbd3f351c1d971_elex_glassworm_rhadamanthys_stealc_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-07-15_409bc73a4922cd61a1fbd3f351c1d971_elex_glassworm_rhadamanthys_stealc_stop
- Size 3.9MB
- SHA256 686ad3ac1dfbd8f7afa8ceeaacff4696c29d2991b7708baa01d535a382c9f205
- MD5 409bc73a4922cd61a1fbd3f351c1d971
- SHA1 6109526a26f4b2f2bb7428495df52aca4f1f0ec6
- SHA512 7247271c25ffb8893f1ac68bdd4fc650add14e6e7a7e9d91ac305de8d16925f739a26f7aea504af36fa7beb10351c7a79a9a39f9c7fcd744cbc435a6e1cdfc33
- SSDEEP 98304:N/NC5jnLrHp/qKm2/Sb/gqAZj+UzKb3HtF3:NMvrRb/G8+H3
- TLSH T158168B13EBC14AE9F38D05365B548140D72AEE21AA4F1351346C326DDFA73878F66A3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE