General
- Target 2026-10-28_76bba62e81bf00d9d658ce1cf9eae861_elex_glassworm_rhadamanthys_stealc_stop
- Size 1.3MB
- Sample261028-mcmdvaga28
- SHA256 548499957610fb053015b6f0fcfaab997c7289092c4ad18da42b21c8ab94732a
- MD5 76bba62e81bf00d9d658ce1cf9eae861
- SHA1 196bbe6965a3532f4de6e9025d3f692705d89cbe
- SHA512 ed0e2c9543191e5339909c56a7aea2220198aaa26db79a98ee57e32e1841fd188112d520cc465bf9547ba51eaba7bd065d2515f4127bfeb4ebc83380c0630e4f
- SSDEEP 12288:++GtVfjTQSaoINAHT1VQ1i3SyQEW85gMer5+nsL1Jer5+nkA1Yaner5+nc:+rt4/NArwjs5pAVG
- TLSH T1CF551753E7818AE8E75D05365B148150922EFD21AA8F6315B86C362CCF733879F66E3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-28_76bba62e81bf00d9d658ce1cf9eae861_elex_glassworm_rhadamanthys_stealc_stop.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-10-28_76bba62e81bf00d9d658ce1cf9eae861_elex_glassworm_rhadamanthys_stealc_stop
- Size 1.3MB
- SHA256 548499957610fb053015b6f0fcfaab997c7289092c4ad18da42b21c8ab94732a
- MD5 76bba62e81bf00d9d658ce1cf9eae861
- SHA1 196bbe6965a3532f4de6e9025d3f692705d89cbe
- SHA512 ed0e2c9543191e5339909c56a7aea2220198aaa26db79a98ee57e32e1841fd188112d520cc465bf9547ba51eaba7bd065d2515f4127bfeb4ebc83380c0630e4f
- SSDEEP 12288:++GtVfjTQSaoINAHT1VQ1i3SyQEW85gMer5+nsL1Jer5+nkA1Yaner5+nc:+rt4/NArwjs5pAVG
- TLSH T1CF551753E7818AE8E75D05365B148150922EFD21AA8F6315B86C362CCF733879F66E3C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE