General
- Target 2026-11-01_87e6bd49ad25409e4badc49288b700c3_elex_glassworm_rhadamanthys_stealc_stop
- Size 1.3MB
- Sample261102-s8hy7abs5w
- SHA256 1a6b37c1008e7648060d024142202916c0ed42eff9ce3bd388572869376e9431
- MD5 87e6bd49ad25409e4badc49288b700c3
- SHA1 b652145d778f4baf5c78e89ae10b7322950051b0
- SHA512 f0900e308084cba0d2f41918fe07bbe2eb5848c09167cbf193258e10435455f110d2314a6f9f92da1e79a71008423a602363174defad681a0beff8ff46e5255e
- SSDEEP 12288:++GtVfjTQSaoINAHT1VQ1i3SyQEW85gMer5+nsL1Jer5+nkA1Yaner5+nP:+rt4/NArwjs5pAVJ
- TLSH T183551753E7818AE8E75D05365B148150922EFD21AA8F6315B86C362CCF733879F66E3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-01_87e6bd49ad25409e4badc49288b700c3_elex_glassworm_rhadamanthys_stealc_stop.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-11-01_87e6bd49ad25409e4badc49288b700c3_elex_glassworm_rhadamanthys_stealc_stop
- Size 1.3MB
- SHA256 1a6b37c1008e7648060d024142202916c0ed42eff9ce3bd388572869376e9431
- MD5 87e6bd49ad25409e4badc49288b700c3
- SHA1 b652145d778f4baf5c78e89ae10b7322950051b0
- SHA512 f0900e308084cba0d2f41918fe07bbe2eb5848c09167cbf193258e10435455f110d2314a6f9f92da1e79a71008423a602363174defad681a0beff8ff46e5255e
- SSDEEP 12288:++GtVfjTQSaoINAHT1VQ1i3SyQEW85gMer5+nsL1Jer5+nkA1Yaner5+nP:+rt4/NArwjs5pAVJ
- TLSH T183551753E7818AE8E75D05365B148150922EFD21AA8F6315B86C362CCF733879F66E3C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE