General
- Target 2026-08-09_ffdd67962e69344a864bd4cf70b2f7f5_elex_glassworm_rhadamanthys_stealc_stop
- Size 3.9MB
- Sample260809-lm7l4acq5t
- SHA256 a595c59d83ef3110ee341ffbae88ebd6baa65867e74b065759dba9fd1cb49a9b
- MD5 ffdd67962e69344a864bd4cf70b2f7f5
- SHA1 4c71590d73c92a6319b564b14988c6675857120e
- SHA512 a94b3e2c8201478136335c3ef338cfbfc892a889bac1418ce2bc8cd8dbf79ccc90ead1c04fdfe96da9fa2a4f3499c50ec235a1a8cdaa97b46bdac5125ef74ae1
- SSDEEP 98304:N/NC5jnLrHp/qKm2/Sb/gqAZj+UzKb3HtFC:NMvrRb/G8+HC
- TLSH T126168B13EBC14AE9F38D05365B548140D72AEE21AA4F1351346C326DDFA73878F66A3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-09_ffdd67962e69344a864bd4cf70b2f7f5_elex_glassworm_rhadamanthys_stealc_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-08-09_ffdd67962e69344a864bd4cf70b2f7f5_elex_glassworm_rhadamanthys_stealc_stop
- Size 3.9MB
- SHA256 a595c59d83ef3110ee341ffbae88ebd6baa65867e74b065759dba9fd1cb49a9b
- MD5 ffdd67962e69344a864bd4cf70b2f7f5
- SHA1 4c71590d73c92a6319b564b14988c6675857120e
- SHA512 a94b3e2c8201478136335c3ef338cfbfc892a889bac1418ce2bc8cd8dbf79ccc90ead1c04fdfe96da9fa2a4f3499c50ec235a1a8cdaa97b46bdac5125ef74ae1
- SSDEEP 98304:N/NC5jnLrHp/qKm2/Sb/gqAZj+UzKb3HtFC:NMvrRb/G8+HC
- TLSH T126168B13EBC14AE9F38D05365B548140D72AEE21AA4F1351346C326DDFA73878F66A3E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE