General
-
Target
0d80a5809dc0b3a3c4d948b85b411358bddedd1947e76ddf2ca038cd68c49b38
-
Size
86KB
-
Sample
250228-ygncgsvzds
-
MD5
0288c72ee5d2b2f16ec13d763fca4ed6
-
SHA1
cd1ab40402acdfe1fe2ccf04e650eedf107a53f6
-
SHA256
0d80a5809dc0b3a3c4d948b85b411358bddedd1947e76ddf2ca038cd68c49b38
-
SHA512
c02fbaf6249ab73612bae7f1ac933402900db747bb421c09c4ce672aa37c11f9a946b50490a61ba94c382f82e73b31a55f7fd6c13c428caa7e311b5da9701d46
-
SSDEEP
1536:NAo0Tj2d6rnJwwvl4ulkP6vghzwYu7vih9GueIh9j2IoHAcBHUIF2kvEHrH1hyhz:NAoglOwvl4ulkP6vghzwYu7vih9GueIG
Behavioral task
behavioral1
Sample
0d80a5809dc0b3a3c4d948b85b411358bddedd1947e76ddf2ca038cd68c49b38.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
0d80a5809dc0b3a3c4d948b85b411358bddedd1947e76ddf2ca038cd68c49b38.exe
Resource
win10v2004-20250217-en
Malware Config
Extracted
blihanstealer
pomdfghrt
-
user_agent
Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; CIBA; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022)
Targets
-
-
Target
0d80a5809dc0b3a3c4d948b85b411358bddedd1947e76ddf2ca038cd68c49b38
-
Size
86KB
-
MD5
0288c72ee5d2b2f16ec13d763fca4ed6
-
SHA1
cd1ab40402acdfe1fe2ccf04e650eedf107a53f6
-
SHA256
0d80a5809dc0b3a3c4d948b85b411358bddedd1947e76ddf2ca038cd68c49b38
-
SHA512
c02fbaf6249ab73612bae7f1ac933402900db747bb421c09c4ce672aa37c11f9a946b50490a61ba94c382f82e73b31a55f7fd6c13c428caa7e311b5da9701d46
-
SSDEEP
1536:NAo0Tj2d6rnJwwvl4ulkP6vghzwYu7vih9GueIh9j2IoHAcBHUIF2kvEHrH1hyhz:NAoglOwvl4ulkP6vghzwYu7vih9GueIG
Score10/10-
Blihanstealer family
-
Deletes itself
-
Executes dropped EXE
-
Adds Run key to start application
-