General
- Target 2026-08-19_8ed8709d2ef0fde1ed36f12fcf11a11b_elex_glassworm_rhadamanthys_stealc_stop
- Size 3.9MB
- Sample260819-j2kprszfja
- SHA256 6326a629327def2ec09910f61ec8968b2c761a22c65252aa3900ed642a2f830c
- MD5 8ed8709d2ef0fde1ed36f12fcf11a11b
- SHA1 d3ddec7593224a97b379af7c95a170518baaa84d
- SHA512 2beb6818cdd0a8a3f89e244030825a3af1362bc637d3cbaaa52e9c443faf35bfe61ca78ab40c0630cab7af18825f782553c1c27a5d11fc6899785fa37e1db07e
- SSDEEP 98304:N/NC5jnLrHp/qKm2/Sb/gqAZj+UzKb3HtF2:NMvrRb/G8+H2
- TLSH T19E168B13EBC14AE9F38D05365B548140D72AEE21AA4F1351346C326DDFA73878F66A3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-19_8ed8709d2ef0fde1ed36f12fcf11a11b_elex_glassworm_rhadamanthys_stealc_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-08-19_8ed8709d2ef0fde1ed36f12fcf11a11b_elex_glassworm_rhadamanthys_stealc_stop
- Size 3.9MB
- SHA256 6326a629327def2ec09910f61ec8968b2c761a22c65252aa3900ed642a2f830c
- MD5 8ed8709d2ef0fde1ed36f12fcf11a11b
- SHA1 d3ddec7593224a97b379af7c95a170518baaa84d
- SHA512 2beb6818cdd0a8a3f89e244030825a3af1362bc637d3cbaaa52e9c443faf35bfe61ca78ab40c0630cab7af18825f782553c1c27a5d11fc6899785fa37e1db07e
- SSDEEP 98304:N/NC5jnLrHp/qKm2/Sb/gqAZj+UzKb3HtF2:NMvrRb/G8+H2
- TLSH T19E168B13EBC14AE9F38D05365B548140D72AEE21AA4F1351346C326DDFA73878F66A3E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE