General
- Target 2026-11-03_a098c63fc05aaadc0f645cd201568a42_elex_glassworm_rhadamanthys_stealc_stop
- Size 1.3MB
- Sample261104-pdcl5shx8v
- SHA256 0200712d75fd5baf27e273e2f952c5f1f88750100c0fd016eaf60e42b647cbb8
- MD5 a098c63fc05aaadc0f645cd201568a42
- SHA1 aa3c0cc7ea5fabf06bda5e21dce23a2bef3fefaf
- SHA512 aff95da6a72047d1ff37efd72193a5857ac30373417deca43d867c143299bf1769c9c6c4bb1944a12568434bc503e898ff78378803acdeed7a9f2700eff0eba8
- SSDEEP 12288:++GtVfjTQSaoINAHT1VQ1i3SyQEW85gMer5+nsL1Jer5+nkA1Yaner5+nr:+rt4/NArwjs5pAVF
- TLSH T1D3551753E7818AE8E75D05365B148150922EFD21AA8F6315B86C362CCF733879F66E3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-03_a098c63fc05aaadc0f645cd201568a42_elex_glassworm_rhadamanthys_stealc_stop.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-11-03_a098c63fc05aaadc0f645cd201568a42_elex_glassworm_rhadamanthys_stealc_stop
- Size 1.3MB
- SHA256 0200712d75fd5baf27e273e2f952c5f1f88750100c0fd016eaf60e42b647cbb8
- MD5 a098c63fc05aaadc0f645cd201568a42
- SHA1 aa3c0cc7ea5fabf06bda5e21dce23a2bef3fefaf
- SHA512 aff95da6a72047d1ff37efd72193a5857ac30373417deca43d867c143299bf1769c9c6c4bb1944a12568434bc503e898ff78378803acdeed7a9f2700eff0eba8
- SSDEEP 12288:++GtVfjTQSaoINAHT1VQ1i3SyQEW85gMer5+nsL1Jer5+nkA1Yaner5+nr:+rt4/NArwjs5pAVF
- TLSH T1D3551753E7818AE8E75D05365B148150922EFD21AA8F6315B86C362CCF733879F66E3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE