General
- Target 2026-08-09_aeb2ab60bb88937b8b7b86e81d301e2b_elex_glassworm_rhadamanthys_stealc_stop
- Size 3.9MB
- Sample260809-hbaansaq7v
- SHA256 1cbebf6a018033c9961d0fdbfc725d3896529332b34013def8fd3c6212b477ac
- MD5 aeb2ab60bb88937b8b7b86e81d301e2b
- SHA1 250fa3935ac9a85867b5ee9cacf84d871b29f675
- SHA512 e3d79bdf215f3c918cd5640275d74c9482acef6517866fada947f67e95f048a93c8726b9789e33a1dbb9480a5cd79a6163bc721490269bfb021406a54b7e8868
- SSDEEP 98304:N/NC5jnLrHp/qKm2/Sb/gqAZj+UzKb3HtFu:NMvrRb/G8+Hu
- TLSH T184168B13EBC14AE9F38D05365B548140D72AEE21AA4F1351346C326DDFA73878F66A3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-09_aeb2ab60bb88937b8b7b86e81d301e2b_elex_glassworm_rhadamanthys_stealc_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-08-09_aeb2ab60bb88937b8b7b86e81d301e2b_elex_glassworm_rhadamanthys_stealc_stop
- Size 3.9MB
- SHA256 1cbebf6a018033c9961d0fdbfc725d3896529332b34013def8fd3c6212b477ac
- MD5 aeb2ab60bb88937b8b7b86e81d301e2b
- SHA1 250fa3935ac9a85867b5ee9cacf84d871b29f675
- SHA512 e3d79bdf215f3c918cd5640275d74c9482acef6517866fada947f67e95f048a93c8726b9789e33a1dbb9480a5cd79a6163bc721490269bfb021406a54b7e8868
- SSDEEP 98304:N/NC5jnLrHp/qKm2/Sb/gqAZj+UzKb3HtFu:NMvrRb/G8+Hu
- TLSH T184168B13EBC14AE9F38D05365B548140D72AEE21AA4F1351346C326DDFA73878F66A3E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE