General
- Target 2026-08-05_170489605d4304b9aa3413ce76aa628a_elex_glassworm_rhadamanthys_stealc_stop
- Size 3.9MB
- Sample260805-hzdb8sfe58
- SHA256 3b2cb05ac1366c0472d82f558dfb74a7ed82363f2fca45ca24520c581fdcd771
- MD5 170489605d4304b9aa3413ce76aa628a
- SHA1 d7c30bbeac5b8391499f91f9d630955c4f7fa2b7
- SHA512 12301dbdaf9bc21a9a61274fd370cd9b695df46dd9d90d1d27209c39b95937cfa43d7862e39b772e00450221c98196f1c8ad0878688fe248b78e13ab338daeff
- SSDEEP 98304:N/NC5jnLrHp/qKm2/Sb/gqAZj+UzKb3HtFF:NMvrRb/G8+HF
- TLSH T198168B13EBC14AE9F38D05365B548140D72AEE21AA4F1351346C326DDFA73878F66A3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-05_170489605d4304b9aa3413ce76aa628a_elex_glassworm_rhadamanthys_stealc_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-08-05_170489605d4304b9aa3413ce76aa628a_elex_glassworm_rhadamanthys_stealc_stop
- Size 3.9MB
- SHA256 3b2cb05ac1366c0472d82f558dfb74a7ed82363f2fca45ca24520c581fdcd771
- MD5 170489605d4304b9aa3413ce76aa628a
- SHA1 d7c30bbeac5b8391499f91f9d630955c4f7fa2b7
- SHA512 12301dbdaf9bc21a9a61274fd370cd9b695df46dd9d90d1d27209c39b95937cfa43d7862e39b772e00450221c98196f1c8ad0878688fe248b78e13ab338daeff
- SSDEEP 98304:N/NC5jnLrHp/qKm2/Sb/gqAZj+UzKb3HtFF:NMvrRb/G8+HF
- TLSH T198168B13EBC14AE9F38D05365B548140D72AEE21AA4F1351346C326DDFA73878F66A3E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE