General
-
Target
ae5563d99199e97665e3b5cd0a372ba97507955e612303f5661304760f75b2d8
-
Size
56KB
-
Sample
250228-bvjj5axmw3
-
MD5
9f3d8d93cafa50ed8bb51904732937f8
-
SHA1
c7a6af8024cb382e16d5e116c4fcdf661b191387
-
SHA256
ae5563d99199e97665e3b5cd0a372ba97507955e612303f5661304760f75b2d8
-
SHA512
9084f0e06d3e2cfbdabbc5c85b56aed2b6e58493e88343e9aaba22f9bb01b971f1d2342f1fda97715874f28dc6761461be609594835758124deded788821bd85
-
SSDEEP
1536:e6q10k0EFjed6rqJ+6vghzwYu7vih9GueIh9j2IoHAcBHUIF2kvEHrH1hyhuhrhn:E1oEFlt6vghzwYu7vih9GueIh9j2IoHQ
Static task
static1
Behavioral task
behavioral1
Sample
ae5563d99199e97665e3b5cd0a372ba97507955e612303f5661304760f75b2d8.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
ae5563d99199e97665e3b5cd0a372ba97507955e612303f5661304760f75b2d8.exe
Resource
win10v2004-20250217-en
Malware Config
Extracted
blihanstealer
pomdfghrt
-
user_agent
Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; CIBA; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022)
Targets
-
-
Target
ae5563d99199e97665e3b5cd0a372ba97507955e612303f5661304760f75b2d8
-
Size
56KB
-
MD5
9f3d8d93cafa50ed8bb51904732937f8
-
SHA1
c7a6af8024cb382e16d5e116c4fcdf661b191387
-
SHA256
ae5563d99199e97665e3b5cd0a372ba97507955e612303f5661304760f75b2d8
-
SHA512
9084f0e06d3e2cfbdabbc5c85b56aed2b6e58493e88343e9aaba22f9bb01b971f1d2342f1fda97715874f28dc6761461be609594835758124deded788821bd85
-
SSDEEP
1536:e6q10k0EFjed6rqJ+6vghzwYu7vih9GueIh9j2IoHAcBHUIF2kvEHrH1hyhuhrhn:E1oEFlt6vghzwYu7vih9GueIh9j2IoHQ
Score10/10-
Blihanstealer family
-
Deletes itself
-
Executes dropped EXE
-
Adds Run key to start application
-