General
- Target 2026-08-20_51188218467c1472cf9163ae27344ed3_elex_glassworm_rhadamanthys_stealc_stop
- Size 3.9MB
- Sample260820-1texzswdjd
- SHA256 5406a4f348e9cbd80620f05ba9a3110f2b471207497350b6a54b8a30bb7c5c94
- MD5 51188218467c1472cf9163ae27344ed3
- SHA1 105d949fbb74256fe8466a596aade872815653c3
- SHA512 8a5a95a817ee43bc250decacc725c6bd55aa6de22a9b5ea80561d05955082f4e934d67a7339a69a501284198c1f5977e6a80a7d9f12d4d3edb6b68edcd0c53d7
- SSDEEP 98304:N/NC5jnLrHp/qKm2/Sb/gqAZj+UzKb3HtFx:NMvrRb/G8+Hx
- TLSH T149168B13EBC14AE9F38D05365B548140D72AEE21AA4F1351346C326DDFA73878F66A3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-20_51188218467c1472cf9163ae27344ed3_elex_glassworm_rhadamanthys_stealc_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-08-20_51188218467c1472cf9163ae27344ed3_elex_glassworm_rhadamanthys_stealc_stop
- Size 3.9MB
- SHA256 5406a4f348e9cbd80620f05ba9a3110f2b471207497350b6a54b8a30bb7c5c94
- MD5 51188218467c1472cf9163ae27344ed3
- SHA1 105d949fbb74256fe8466a596aade872815653c3
- SHA512 8a5a95a817ee43bc250decacc725c6bd55aa6de22a9b5ea80561d05955082f4e934d67a7339a69a501284198c1f5977e6a80a7d9f12d4d3edb6b68edcd0c53d7
- SSDEEP 98304:N/NC5jnLrHp/qKm2/Sb/gqAZj+UzKb3HtFx:NMvrRb/G8+Hx
- TLSH T149168B13EBC14AE9F38D05365B548140D72AEE21AA4F1351346C326DDFA73878F66A3E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE