General
-
Target
353310276dd7a3fe7706aecd345efc1e4333ed828ebcc93e155d11a2d469c532
-
Size
54KB
-
Sample
250227-zwy8zayvbz
-
MD5
01694f435c94919ef520d3f430c90c92
-
SHA1
50c190919463e5890c82bd9a4b9b2e04180c128e
-
SHA256
353310276dd7a3fe7706aecd345efc1e4333ed828ebcc93e155d11a2d469c532
-
SHA512
653bda5ea87522b41c5f2e8f26712edf58485f2a117fdaa33fbd4043d78c922a6838c56b1a853600b3846ebc804b5568f34e7a70ae068a4497fd6b459f8eca8f
-
SSDEEP
1536:e6q10k0EFjed6rqJ+6vghzwYu7vih9GueIh9j2IoHAjUvJQ/johChPrdh4h3hUhZ:E1oEFlt6vghzwYu7vih9GueIh9j2IoHQ
Static task
static1
Behavioral task
behavioral1
Sample
353310276dd7a3fe7706aecd345efc1e4333ed828ebcc93e155d11a2d469c532.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
353310276dd7a3fe7706aecd345efc1e4333ed828ebcc93e155d11a2d469c532.exe
Resource
win10v2004-20250217-en
Malware Config
Extracted
blihanstealer
pomdfghrt
-
user_agent
Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; CIBA; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022)
Targets
-
-
Target
353310276dd7a3fe7706aecd345efc1e4333ed828ebcc93e155d11a2d469c532
-
Size
54KB
-
MD5
01694f435c94919ef520d3f430c90c92
-
SHA1
50c190919463e5890c82bd9a4b9b2e04180c128e
-
SHA256
353310276dd7a3fe7706aecd345efc1e4333ed828ebcc93e155d11a2d469c532
-
SHA512
653bda5ea87522b41c5f2e8f26712edf58485f2a117fdaa33fbd4043d78c922a6838c56b1a853600b3846ebc804b5568f34e7a70ae068a4497fd6b459f8eca8f
-
SSDEEP
1536:e6q10k0EFjed6rqJ+6vghzwYu7vih9GueIh9j2IoHAjUvJQ/johChPrdh4h3hUhZ:E1oEFlt6vghzwYu7vih9GueIh9j2IoHQ
Score10/10-
Blihanstealer family
-
Deletes itself
-
Executes dropped EXE
-
Adds Run key to start application
-