General
- Target 2026-08-09_6af4445b558893a02b9aa1e2c99f0620_elex_glassworm_rhadamanthys_stealc_stop
- Size 3.9MB
- Sample260809-hjl97ssera
- SHA256 fb392d5fa3bf36a5eabb0495fb8e58ac5b5d65ce05e34c8d9579f68f4b6af00e
- MD5 6af4445b558893a02b9aa1e2c99f0620
- SHA1 bef7cac5c5ebcfc63e11371e903e7c746341fe07
- SHA512 c9724950514b7ac61274f7b93a6514023207b24a2dfcf15ad4b442131a2244b3f9fd21e761db2274fb853bbcdd943e49b4b2960979e44cc6c1c1b949661c31a1
- SSDEEP 98304:N/NC5jnLrHp/qKm2/Sb/gqAZj+UzKb3HtFg:NMvrRb/G8+Hg
- TLSH T1FA168B13EBC14AE9F38D05365B548140D72AEE21AA4F1351346C326DDFA73878F66A3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-09_6af4445b558893a02b9aa1e2c99f0620_elex_glassworm_rhadamanthys_stealc_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-08-09_6af4445b558893a02b9aa1e2c99f0620_elex_glassworm_rhadamanthys_stealc_stop
- Size 3.9MB
- SHA256 fb392d5fa3bf36a5eabb0495fb8e58ac5b5d65ce05e34c8d9579f68f4b6af00e
- MD5 6af4445b558893a02b9aa1e2c99f0620
- SHA1 bef7cac5c5ebcfc63e11371e903e7c746341fe07
- SHA512 c9724950514b7ac61274f7b93a6514023207b24a2dfcf15ad4b442131a2244b3f9fd21e761db2274fb853bbcdd943e49b4b2960979e44cc6c1c1b949661c31a1
- SSDEEP 98304:N/NC5jnLrHp/qKm2/Sb/gqAZj+UzKb3HtFg:NMvrRb/G8+Hg
- TLSH T1FA168B13EBC14AE9F38D05365B548140D72AEE21AA4F1351346C326DDFA73878F66A3E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE