General
- Target 2026-11-03_6432bb38aaa71b1b4d67c90ea097f601_elex_glassworm_rhadamanthys_stealc_stop
- Size 1.3MB
- Sample261104-xcbbpaez6p
- SHA256 9717fcfe43e3d7fb289147c4c4df5e19ab8f682f77392b9ce03944fe91c7d524
- MD5 6432bb38aaa71b1b4d67c90ea097f601
- SHA1 9092f5dc4b38d0182b50835b30dff880bab7fd98
- SHA512 8c0276e92f4556d26964138975fd011a35d86aeee67aba626550e599368758d5b8396b097b5cd73054ad4e231aa0779dff8c2bae20c26ec930341b555fc9440d
- SSDEEP 12288:++GtVfjTQSaoINAHT1VQ1i3SyQEW85gMer5+nsL1Jer5+nkA1Yaner5+nF:+rt4/NArwjs5pAVj
- TLSH T10C551753E7818AE8E75D05365B148150922EFD21AA8F6315B86C362CCF733879F66E3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-03_6432bb38aaa71b1b4d67c90ea097f601_elex_glassworm_rhadamanthys_stealc_stop.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-11-03_6432bb38aaa71b1b4d67c90ea097f601_elex_glassworm_rhadamanthys_stealc_stop
- Size 1.3MB
- SHA256 9717fcfe43e3d7fb289147c4c4df5e19ab8f682f77392b9ce03944fe91c7d524
- MD5 6432bb38aaa71b1b4d67c90ea097f601
- SHA1 9092f5dc4b38d0182b50835b30dff880bab7fd98
- SHA512 8c0276e92f4556d26964138975fd011a35d86aeee67aba626550e599368758d5b8396b097b5cd73054ad4e231aa0779dff8c2bae20c26ec930341b555fc9440d
- SSDEEP 12288:++GtVfjTQSaoINAHT1VQ1i3SyQEW85gMer5+nsL1Jer5+nkA1Yaner5+nF:+rt4/NArwjs5pAVj
- TLSH T10C551753E7818AE8E75D05365B148150922EFD21AA8F6315B86C362CCF733879F66E3C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE