General
- Target 2026-07-20_a803857971209e44c988ae1968940699_elex_glassworm_rhadamanthys_stealc_stop
- Size 3.9MB
- Sample260720-2p2fvsgs7m
- SHA256 58828f4c60e7eb5634eee50848ce0e0fa97deeaecc047e6204303465d089e5d1
- MD5 a803857971209e44c988ae1968940699
- SHA1 064580e669b94370feda09ea6adc67cb9ccbd1d3
- SHA512 fdaa7905a73ca63b9b5220af5e10ff09915ac43a70c75bb09670cd288b9d1754ed4b0914491036e3e072c8fd5758a6de239e9001e251376ef6d7d610ffd17af7
- SSDEEP 98304:N/NC5jnLrHp/qKm2/Sb/gqAZj+UzKb3HtFZ:NMvrRb/G8+HZ
- TLSH T14D168B13EBC14AE9F38D05365B548140D72AEE21AA4F1351346C326DDFA73878F66A3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-20_a803857971209e44c988ae1968940699_elex_glassworm_rhadamanthys_stealc_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-07-20_a803857971209e44c988ae1968940699_elex_glassworm_rhadamanthys_stealc_stop
- Size 3.9MB
- SHA256 58828f4c60e7eb5634eee50848ce0e0fa97deeaecc047e6204303465d089e5d1
- MD5 a803857971209e44c988ae1968940699
- SHA1 064580e669b94370feda09ea6adc67cb9ccbd1d3
- SHA512 fdaa7905a73ca63b9b5220af5e10ff09915ac43a70c75bb09670cd288b9d1754ed4b0914491036e3e072c8fd5758a6de239e9001e251376ef6d7d610ffd17af7
- SSDEEP 98304:N/NC5jnLrHp/qKm2/Sb/gqAZj+UzKb3HtFZ:NMvrRb/G8+HZ
- TLSH T14D168B13EBC14AE9F38D05365B548140D72AEE21AA4F1351346C326DDFA73878F66A3E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE