General
- Target 2026-08-25_c6c7a9bc9f979bc3e429f4f534a489e2_elex_glassworm_icedid_njrat_rhadamanthys_stealc_stop
- Size 1.5MB
- Sample260826-l6caaswfqd
- SHA256 9d5290266d47168b2e1207cca37bd79c2adf6def42366475297962c6b6d881e2
- MD5 c6c7a9bc9f979bc3e429f4f534a489e2
- SHA1 e254cadcc2909e58cea44f2ed57ff3bc842fcdbb
- SHA512 4d445a5ed7fbcb9424d7bfa34c400487d2d488519c9e05bf99dd61cd7c700c6a1e09aaf0d2e61f86bf733c5286555eaf01cbbda4d17205a8757069c3e24e61ed
- SSDEEP 12288:8+GtVfjTQSaoINAHT1VQ1i3SyQEW85gbgA1YaL8i0DVmer5+n/er5+nsoZj:8rt4/NArwjs5zAVIW
- TLSH T1CD751853EB814AE8E75D09361F588190962EFE215A4F6351B46C721CCFA33878F62E3D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-25_c6c7a9bc9f979bc3e429f4f534a489e2_elex_glassworm_icedid_njrat_rhadamanthys_stealc_stop.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-08-25_c6c7a9bc9f979bc3e429f4f534a489e2_elex_glassworm_icedid_njrat_rhadamanthys_stealc_stop
- Size 1.5MB
- SHA256 9d5290266d47168b2e1207cca37bd79c2adf6def42366475297962c6b6d881e2
- MD5 c6c7a9bc9f979bc3e429f4f534a489e2
- SHA1 e254cadcc2909e58cea44f2ed57ff3bc842fcdbb
- SHA512 4d445a5ed7fbcb9424d7bfa34c400487d2d488519c9e05bf99dd61cd7c700c6a1e09aaf0d2e61f86bf733c5286555eaf01cbbda4d17205a8757069c3e24e61ed
- SSDEEP 12288:8+GtVfjTQSaoINAHT1VQ1i3SyQEW85gbgA1YaL8i0DVmer5+n/er5+nsoZj:8rt4/NArwjs5zAVIW
- TLSH T1CD751853EB814AE8E75D09361F588190962EFE215A4F6351B46C721CCFA33878F62E3D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE