General
- Target 2026-11-04_ec4e20ae5dc7c6dfb299043b936e546d_elex_glassworm_rhadamanthys_stealc_stop
- Size 1.3MB
- Sample261105-hb53caaw3k
- SHA256 bac75914e2cb6d4f41b5c045eaaed3b47660949450e6341cd2fd3c51251dcfce
- MD5 ec4e20ae5dc7c6dfb299043b936e546d
- SHA1 284dd1817957401c1cb6b430076240e22d6bf3bc
- SHA512 3d97a8c8b389535de3be9c748d45494b7bb4dbd6ce75c134f347d4da407e8dcf770c2ee51115a66991e7cf0c8f7e1b8fb8a2210739307b6ca08ee71543a085ee
- SSDEEP 12288:++GtVfjTQSaoINAHT1VQ1i3SyQEW85gMer5+nsL1Jer5+nkA1Yaner5+nw:+rt4/NArwjs5pAV+
- TLSH T1D1551753E7818AE8E75D05365B148150922EFD21AA8F6315B86C362CCF733879F66E3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-04_ec4e20ae5dc7c6dfb299043b936e546d_elex_glassworm_rhadamanthys_stealc_stop.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-11-04_ec4e20ae5dc7c6dfb299043b936e546d_elex_glassworm_rhadamanthys_stealc_stop
- Size 1.3MB
- SHA256 bac75914e2cb6d4f41b5c045eaaed3b47660949450e6341cd2fd3c51251dcfce
- MD5 ec4e20ae5dc7c6dfb299043b936e546d
- SHA1 284dd1817957401c1cb6b430076240e22d6bf3bc
- SHA512 3d97a8c8b389535de3be9c748d45494b7bb4dbd6ce75c134f347d4da407e8dcf770c2ee51115a66991e7cf0c8f7e1b8fb8a2210739307b6ca08ee71543a085ee
- SSDEEP 12288:++GtVfjTQSaoINAHT1VQ1i3SyQEW85gMer5+nsL1Jer5+nkA1Yaner5+nw:+rt4/NArwjs5pAV+
- TLSH T1D1551753E7818AE8E75D05365B148150922EFD21AA8F6315B86C362CCF733879F66E3C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE