General
- Target 2026-08-06_f1613cc69be77a673af32404cd97f4ef_elex_glassworm_rhadamanthys_stealc_stop
- Size 3.9MB
- Sample260806-fpjp6afg85
- SHA256 7cb8f69e1da8cb1ef177ca2c68f311f74394815bf5f3e862099feeb7ccadc118
- MD5 f1613cc69be77a673af32404cd97f4ef
- SHA1 354232238564bb17d5dc83c6bf3be8ababe776b7
- SHA512 9e921da117f2bf556011dda433d1b9c75f607d89515171fa43be08c47a3b2697284193b8cde657802b257523904603459d5f3717a483706c5ebbf2a43b701f92
- SSDEEP 98304:N/NC5jnLrHp/qKm2/Sb/gqAZj+UzKb3HtFe:NMvrRb/G8+He
- TLSH T1E2168B13EBC14AE9F38D05365B548140D72AEE21AA4F1351346C326DDFA73878F66A3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-06_f1613cc69be77a673af32404cd97f4ef_elex_glassworm_rhadamanthys_stealc_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-08-06_f1613cc69be77a673af32404cd97f4ef_elex_glassworm_rhadamanthys_stealc_stop
- Size 3.9MB
- SHA256 7cb8f69e1da8cb1ef177ca2c68f311f74394815bf5f3e862099feeb7ccadc118
- MD5 f1613cc69be77a673af32404cd97f4ef
- SHA1 354232238564bb17d5dc83c6bf3be8ababe776b7
- SHA512 9e921da117f2bf556011dda433d1b9c75f607d89515171fa43be08c47a3b2697284193b8cde657802b257523904603459d5f3717a483706c5ebbf2a43b701f92
- SSDEEP 98304:N/NC5jnLrHp/qKm2/Sb/gqAZj+UzKb3HtFe:NMvrRb/G8+He
- TLSH T1E2168B13EBC14AE9F38D05365B548140D72AEE21AA4F1351346C326DDFA73878F66A3E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE