blihanstealer | e96c39e2e39407695c120a317ff6a7eb159041989ab1a1e6d689ce1f23860cff | Triage

Sharing

General

Target

e96c39e2e39407695c120a317ff6a7eb159041989ab1a1e6d689ce1f23860cff.exe
Size

71KB
Sample

250324-a5sp4svp12
MD5

1712579bbf8f1918816a8934f2282c8d
SHA1

0ee95c429e1ea88431cb7d65fe469a5817a9528e
SHA256

e96c39e2e39407695c120a317ff6a7eb159041989ab1a1e6d689ce1f23860cff
SHA512

40a36152483da9d1159a9e3951827ac869361b4b504ea44fa203008339556d1b7457e33b6952ea62ed4e2663ec6c32acce961f825b3d9df9614ed72ec4ed756e
SSDEEP

1536:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYVFl2g5u58dO0xXHQEyYfdhNhFO5h3xhIj:+MA6C1VqaqhtgVRNToV7TtRu8rM0wYVF

Score

10^/10

blihanstealer discovery persistence stealer trojan

Malware Config

Targets

- Target
  
  e96c39e2e39407695c120a317ff6a7eb159041989ab1a1e6d689ce1f23860cff.exe
- Size
  
  71KB
- MD5
  
  1712579bbf8f1918816a8934f2282c8d
- SHA1
  
  0ee95c429e1ea88431cb7d65fe469a5817a9528e
- SHA256
  
  e96c39e2e39407695c120a317ff6a7eb159041989ab1a1e6d689ce1f23860cff
- SHA512
  
  40a36152483da9d1159a9e3951827ac869361b4b504ea44fa203008339556d1b7457e33b6952ea62ed4e2663ec6c32acce961f825b3d9df9614ed72ec4ed756e
- SSDEEP
  
  1536:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYVFl2g5u58dO0xXHQEyYfdhNhFO5h3xhIj:+MA6C1VqaqhtgVRNToV7TtRu8rM0wYVF
Score

10^/10

blihanstealer discovery persistence stealer trojan
- BlihanStealer
  Blihan is a stealer written in C++.
  trojan stealer blihanstealer
- Blihanstealer family
  blihanstealer
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

blihanstealerdiscoverypersistencestealertrojan

behavioral2

blihanstealerdiscoverypersistencestealertrojan