General
- Target 2026-08-05_fac8c8b3b9fabba30b85561a841007d1_elex_glassworm_rhadamanthys_stealc_stop
- Size 3.9MB
- Sample260805-hfhslsfa67
- SHA256 d6c5c29bf88233fe9427952a1a48a7eb6131a9ca0de739f1ff60348eca382659
- MD5 fac8c8b3b9fabba30b85561a841007d1
- SHA1 fe600d879f5031de0bb1274bbc1c7100a7ee415d
- SHA512 1ced5fe590aa9ee54d3e512f3394971f97e29406dc55e6eb47ad9d6bf71dd9926f8fcd78129005f591118a6951d64beb6812638345e8416aced0f5aee16c9eb7
- SSDEEP 98304:N/NC5jnLrHp/qKm2/Sb/gqAZj+UzKb3HtFO:NMvrRb/G8+HO
- TLSH T133168B13EBC14AE9F38D05365B548140D72AEE21AA4F1351346C326DDFA73878F66A3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-05_fac8c8b3b9fabba30b85561a841007d1_elex_glassworm_rhadamanthys_stealc_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-08-05_fac8c8b3b9fabba30b85561a841007d1_elex_glassworm_rhadamanthys_stealc_stop
- Size 3.9MB
- SHA256 d6c5c29bf88233fe9427952a1a48a7eb6131a9ca0de739f1ff60348eca382659
- MD5 fac8c8b3b9fabba30b85561a841007d1
- SHA1 fe600d879f5031de0bb1274bbc1c7100a7ee415d
- SHA512 1ced5fe590aa9ee54d3e512f3394971f97e29406dc55e6eb47ad9d6bf71dd9926f8fcd78129005f591118a6951d64beb6812638345e8416aced0f5aee16c9eb7
- SSDEEP 98304:N/NC5jnLrHp/qKm2/Sb/gqAZj+UzKb3HtFO:NMvrRb/G8+HO
- TLSH T133168B13EBC14AE9F38D05365B548140D72AEE21AA4F1351346C326DDFA73878F66A3E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE