Extracted

• • Target

    24092aa07fb04b5693d440e357e997dd8151bd0c1681afffe5b5b125aa36598b.exe

  • Size

    77KB

  • MD5

    253e48dbfc9ee67105f1418809b215de

  • SHA1

    60f1b4a4ebd41fa67748faadafb2919b63c88796

  • SHA256

    24092aa07fb04b5693d440e357e997dd8151bd0c1681afffe5b5b125aa36598b

  • SHA512

    7061a8bb99b7a391c87df698500a265bdbecf0c2bdcd29a4c1465e17595006f0e98e9bea6a35acc92aab16b50578ab0ec09e3f22e43eb2ee329bb5da67d841df

  • SSDEEP

    1536:NAo0Tj2d6rnJwwvl4ulkP6vghzwYu7vih9GueIh9j2IoHAjU+Eh6IbRJhhqHihI1:NAoglOwvl4ulkP6vghzwYu7vih9GueID

  Score

  10^/10

  blihanstealerdiscoverypersistencestealertrojan

  • BlihanStealer

    Blihan is a stealer written in C++.

    trojanstealerblihanstealer

  • Blihanstealer family

    blihanstealer

  • Deletes itself

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1behavioral2