General
- Target 2026-11-09_a5542a5b5668a80215cd65d87e10966c_elex_glassworm_rhadamanthys_stealc_stop
- Size 1.3MB
- Sample261110-n3dp3afa94
- SHA256 ed8e48754d8e37fa3c40ce0a650cd8eda40fb5e16d01f4fdb9b1fcd41ef497f6
- MD5 a5542a5b5668a80215cd65d87e10966c
- SHA1 db4ef2c78a0bad7ba051f670b27651c500e0247f
- SHA512 c1b8433972b7337c563da78d974b2335aee8e9e14fc74ef8ada7dbc75cd6217cd03706c925ce20339b99b03836be0d47a75d21e4ef4dedb0587d7c4b5097d1c5
- SSDEEP 12288:++GtVfjTQSaoINAHT1VQ1i3SyQEW85gMer5+nsL1Jer5+nkA1Yaner5+n5:+rt4/NArwjs5pAVb
- TLSH T199551753E7818AE8E75D05365B148150922EFD21AA8F6315B86C362CCF733879F66E3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-09_a5542a5b5668a80215cd65d87e10966c_elex_glassworm_rhadamanthys_stealc_stop.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target 2026-11-09_a5542a5b5668a80215cd65d87e10966c_elex_glassworm_rhadamanthys_stealc_stop
- Size 1.3MB
- SHA256 ed8e48754d8e37fa3c40ce0a650cd8eda40fb5e16d01f4fdb9b1fcd41ef497f6
- MD5 a5542a5b5668a80215cd65d87e10966c
- SHA1 db4ef2c78a0bad7ba051f670b27651c500e0247f
- SHA512 c1b8433972b7337c563da78d974b2335aee8e9e14fc74ef8ada7dbc75cd6217cd03706c925ce20339b99b03836be0d47a75d21e4ef4dedb0587d7c4b5097d1c5
- SSDEEP 12288:++GtVfjTQSaoINAHT1VQ1i3SyQEW85gMer5+nsL1Jer5+nkA1Yaner5+n5:+rt4/NArwjs5pAVb
- TLSH T199551753E7818AE8E75D05365B148150922EFD21AA8F6315B86C362CCF733879F66E3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE