General
-
Target
132ec345eb42b84fd6d389a7ced2990a09bd7cd87d084fbab5642317e49a9bb9
-
Size
56KB
-
Sample
250227-yh5m6axqs3
-
MD5
b75069c62de177b02e5e6a2fbced67fd
-
SHA1
62168f572199e80b520b685532590cfb005b2e9c
-
SHA256
132ec345eb42b84fd6d389a7ced2990a09bd7cd87d084fbab5642317e49a9bb9
-
SHA512
5ab8672589cb77619a9c4c25fb755b535b6607ede349b52637640dc01b4184d8891e77aae059d23ca43e99841dd80b4c2409e1ad3a84d28bca99c7e7c3345cc8
-
SSDEEP
1536:e6q10k0EFjed6rqJ+6vghzwYu7vih9GueIh9j2IoHAjUvJQ/johChPrdh4h3hUhf:E1oEFlt6vghzwYu7vih9GueIh9j2IoHm
Static task
static1
Behavioral task
behavioral1
Sample
132ec345eb42b84fd6d389a7ced2990a09bd7cd87d084fbab5642317e49a9bb9.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
132ec345eb42b84fd6d389a7ced2990a09bd7cd87d084fbab5642317e49a9bb9.exe
Resource
win10v2004-20250217-en
Malware Config
Extracted
blihanstealer
pomdfghrt
-
user_agent
Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; CIBA; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022)
Targets
-
-
Target
132ec345eb42b84fd6d389a7ced2990a09bd7cd87d084fbab5642317e49a9bb9
-
Size
56KB
-
MD5
b75069c62de177b02e5e6a2fbced67fd
-
SHA1
62168f572199e80b520b685532590cfb005b2e9c
-
SHA256
132ec345eb42b84fd6d389a7ced2990a09bd7cd87d084fbab5642317e49a9bb9
-
SHA512
5ab8672589cb77619a9c4c25fb755b535b6607ede349b52637640dc01b4184d8891e77aae059d23ca43e99841dd80b4c2409e1ad3a84d28bca99c7e7c3345cc8
-
SSDEEP
1536:e6q10k0EFjed6rqJ+6vghzwYu7vih9GueIh9j2IoHAjUvJQ/johChPrdh4h3hUhf:E1oEFlt6vghzwYu7vih9GueIh9j2IoHm
Score10/10-
Blihanstealer family
-
Deletes itself
-
Executes dropped EXE
-
Adds Run key to start application
-