Extracted

• • Target

    49a5937d47e5fa3cb72572c1df09587a7d8fdd52c481750c46a1ce75c945378d.exe

  • Size

    65KB

  • MD5

    41cfacdbab38d67a910f60468b8672bb

  • SHA1

    8d89a70b11303b815cee025d26cc7310a43a9539

  • SHA256

    49a5937d47e5fa3cb72572c1df09587a7d8fdd52c481750c46a1ce75c945378d

  • SHA512

    17d6ff3aa1a16498ff00f6473e685c5c65dcc4ca0ab7323ab65205f090eeb70358030bd2bd0bb6755eb58a9d7737515198ed3d658037596c62eb7ad951644143

  • SSDEEP

    1536:e6q10k0EFjed6rqJ+6vghzwYu7vih9GueIh9j2IoHAjU+EmkcU+uhIehXehXhHhN:E1oEFlt6vghzwYu7vih9GueIh9j2IoHY

  Score

  10^/10

  blihanstealerdiscoverypersistencestealertrojan

  • BlihanStealer

    Blihan is a stealer written in C++.

    trojanstealerblihanstealer

  • Blihanstealer family

    blihanstealer

  • Deletes itself

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1behavioral2