General
- Target 2026-08-05_c912912413836910a6c2269ebe656176_elex_glassworm_rhadamanthys_stealc_stop
- Size 3.9MB
- Sample260805-hkdz8axtds
- SHA256 0b7aa68c15d66d69c5f24626f45be735a3e0e4a919d9ce6dbb54300d7c6ee5f2
- MD5 c912912413836910a6c2269ebe656176
- SHA1 90eb87def236055372167efb52e8e27de12f8e3b
- SHA512 0092d76967b8d0a03e44234ed3db75fa829c19dceee84018d71b590cde74e22b90a455a1501d81f9bb51560f7c2c3e0f3e1c1e8b5b7f6e1f4343a2188740f2c5
- SSDEEP 98304:N/NC5jnLrHp/qKm2/Sb/gqAZj+UzKb3HtFQ:NMvrRb/G8+HQ
- TLSH T1CA168B13EBC14AE9F38D05365B548140D72AEE21AA4F1351346C326DDFA73878F66A3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-05_c912912413836910a6c2269ebe656176_elex_glassworm_rhadamanthys_stealc_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-08-05_c912912413836910a6c2269ebe656176_elex_glassworm_rhadamanthys_stealc_stop
- Size 3.9MB
- SHA256 0b7aa68c15d66d69c5f24626f45be735a3e0e4a919d9ce6dbb54300d7c6ee5f2
- MD5 c912912413836910a6c2269ebe656176
- SHA1 90eb87def236055372167efb52e8e27de12f8e3b
- SHA512 0092d76967b8d0a03e44234ed3db75fa829c19dceee84018d71b590cde74e22b90a455a1501d81f9bb51560f7c2c3e0f3e1c1e8b5b7f6e1f4343a2188740f2c5
- SSDEEP 98304:N/NC5jnLrHp/qKm2/Sb/gqAZj+UzKb3HtFQ:NMvrRb/G8+HQ
- TLSH T1CA168B13EBC14AE9F38D05365B548140D72AEE21AA4F1351346C326DDFA73878F66A3E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE