Extracted

• • Target

    1f9207b95d365add73f13fe1c257d0c1fa17a1b90c1a83cce351e57fea73caccN.exe

  • Size

    72KB

  • MD5

    9687847e6a56db0d21125e0fb35a04e0

  • SHA1

    4696a1dbd104d6b95fe2877fa87828b1c8bb5ba8

  • SHA256

    1f9207b95d365add73f13fe1c257d0c1fa17a1b90c1a83cce351e57fea73cacc

  • SHA512

    c7c2710c6b4dce8f0c162a4199b28a05354c449679070d27c5aa3261a74b5268bed1690312396980937e112f7ced158145f063b25cf578cedb06455648d68440

  • SSDEEP

    1536:e6q10k0EFjed6rqJ+6vghzwYu7vih9GueIh9j2IoHAcBHUIF2kvEHrH1hyhuhrhT:E1oEFlt6vghzwYu7vih9GueIh9j2IoH

  Score

  10^/10

  blihanstealerdiscoverypersistencestealertrojan

  • BlihanStealer

    Blihan is a stealer written in C++.

    trojanstealerblihanstealer

  • Blihanstealer family

    blihanstealer

  • Deletes itself

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1behavioral2