General
- Target 2026-10-19_6eef351d8d43c3a4857b2a426bb1e78d_elex_glassworm_rhadamanthys_stealc_stop
- Size 1.3MB
- Sample261020-vgg9pasxdt
- SHA256 0777daa75643361084d1df56c5ace3909f6275871a6713cd5d3bada8e317e04d
- MD5 6eef351d8d43c3a4857b2a426bb1e78d
- SHA1 d9d5ba128aabb5ea2b5522d0a3a8740f92294095
- SHA512 525bba8f8eef9a6fc35b1c57da15965e908dc559f38962513234b9fc3c1017481ca10a4dcbdc97626d8870fd46c25014e30c6a892f723277916ad04538eadcd4
- SSDEEP 12288:++GtVfjTQSaoINAHT1VQ1i3SyQEW85gMer5+nsL1Jer5+nkA1Yaner5+nn:+rt4/NArwjs5pAVx
- TLSH T1B5551753E7818AE8E75D05365B148150922EFD21AA8F6315B86C362CCF733879F66E3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-19_6eef351d8d43c3a4857b2a426bb1e78d_elex_glassworm_rhadamanthys_stealc_stop.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-10-19_6eef351d8d43c3a4857b2a426bb1e78d_elex_glassworm_rhadamanthys_stealc_stop
- Size 1.3MB
- SHA256 0777daa75643361084d1df56c5ace3909f6275871a6713cd5d3bada8e317e04d
- MD5 6eef351d8d43c3a4857b2a426bb1e78d
- SHA1 d9d5ba128aabb5ea2b5522d0a3a8740f92294095
- SHA512 525bba8f8eef9a6fc35b1c57da15965e908dc559f38962513234b9fc3c1017481ca10a4dcbdc97626d8870fd46c25014e30c6a892f723277916ad04538eadcd4
- SSDEEP 12288:++GtVfjTQSaoINAHT1VQ1i3SyQEW85gMer5+nsL1Jer5+nkA1Yaner5+nn:+rt4/NArwjs5pAVx
- TLSH T1B5551753E7818AE8E75D05365B148150922EFD21AA8F6315B86C362CCF733879F66E3C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE