Extracted

• • Target

    1c4d35f7652b7dea76c6a63c31e81c67d62fa08fb8104b0bacc3e916894c1954N.exe

  • Size

    41KB

  • MD5

    6e1f36d9d3a59e081b811ed82e212210

  • SHA1

    3af883a8713888a79636ceb6dd48954fa37d9f61

  • SHA256

    1c4d35f7652b7dea76c6a63c31e81c67d62fa08fb8104b0bacc3e916894c1954

  • SHA512

    7d269fed73bf16efd8601aec48c18be726f25b1f58e8a3554d8a840370f6e9b4521997dc0387e6bc4315787fb09033aef7b8aa2f918da56b3f91fb170df9006e

  • SSDEEP

    768:ePyFZFASe0Ep0EpHZplRpqpd6rqxn4p6vghzwYu7vih9GueIh9j2IoHAjU+Eh6IZ:e6q10k0EFjed6rqJ+6vghzwYu7vih9Gd

  Score

  10^/10

  blihanstealerdiscoverypersistencestealertrojan

  • BlihanStealer

    Blihan is a stealer written in C++.

    trojanstealerblihanstealer

  • Blihanstealer family

    blihanstealer

  • Deletes itself

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1behavioral2