General
- Target 2026-07-30_409b1834a370afb966ef15b27e04bbda_elex_glassworm_rhadamanthys_stealc_stop
- Size 3.9MB
- Sample260730-weyz4atfpd
- SHA256 40e81186b243663a7918c15416aeecbf16cb5aed8215eaad863001df55cb7685
- MD5 409b1834a370afb966ef15b27e04bbda
- SHA1 e707c130a290dcb98cf6c07c92c191bc175d1b02
- SHA512 c7e5d70b3be73662572e257abdd4dc6da3a3d187da2a4143fe5cd49c4a9c831327e8b830deec44d94de53771342129393cf5836ca16ef2d30cebc452c0de2c56
- SSDEEP 98304:N/NC5jnLrHp/qKm2/Sb/gqAZj+UzKb3HtFb:NMvrRb/G8+Hb
- TLSH T1F7168B13EBC14AE9F38D05365B548140D72AEE21AA4F1351346C326DDFA73878F66A3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-30_409b1834a370afb966ef15b27e04bbda_elex_glassworm_rhadamanthys_stealc_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-07-30_409b1834a370afb966ef15b27e04bbda_elex_glassworm_rhadamanthys_stealc_stop
- Size 3.9MB
- SHA256 40e81186b243663a7918c15416aeecbf16cb5aed8215eaad863001df55cb7685
- MD5 409b1834a370afb966ef15b27e04bbda
- SHA1 e707c130a290dcb98cf6c07c92c191bc175d1b02
- SHA512 c7e5d70b3be73662572e257abdd4dc6da3a3d187da2a4143fe5cd49c4a9c831327e8b830deec44d94de53771342129393cf5836ca16ef2d30cebc452c0de2c56
- SSDEEP 98304:N/NC5jnLrHp/qKm2/Sb/gqAZj+UzKb3HtFb:NMvrRb/G8+Hb
- TLSH T1F7168B13EBC14AE9F38D05365B548140D72AEE21AA4F1351346C326DDFA73878F66A3E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE